Breaches of health information: are electronic records different from paper records?