patient records in filing cabinet drawer representing data protection freedom of information records management and information security