Policies for patient access to clinical data via PHRs: current state and recommendations | Synapse