A Data Protection by Design Model for Privacy Management in Electronic Health Records