A privacy framework for secondary use of medical data | Synapse