Conclusions: The failure to comply with appropriate confidential data protection regulations is a persistent problem. Education produces some improvement but we also propose a systemic approach to solving this problem. (Source: International Journal of Medical Informatics).