HIPAA: the end of epidemiology, or a new social contract?