doctors are required to keep patient's records completely confidential