maintaining interactive files and records concerning the medical condition and treatment of individuals for use in risk management and regulatory compliance by insurers and professionals in the medical field