Enabling Privacy by Design in Medical Records Sharing