Technology, new methods for collecting data, expanding needs and uses of data, all have significantly increased the complexity of maintaining confidentiality of patient information. To safeguard against misuse of, and inappropriate access to, sensitive information, hospitals must develop organization-wide approaches. They should involve all key hospital players in developing such systems, including, but not all limited to, access managers, data processing, administration, medical and nursing staff and health information managers.