+Dos and donts responding patient requests personal data