Business process management enabled compliance--aware medical record sharing