Privacy and Information Security in Health - Why, What and How?