records management in the nature of providing access to privacy preference information defined by individuals that specifies limits, if any, to access healthcare records associated with the individuals