Compliance aware cross-organization medical record sharing