Institutional privacy: where confidentiality meets compliance.