Medtronic, a manufacturer of implantable cardiac defibrillators, contracts with hospitals and physicians for the sale of the devices. The standard contract provides that Medtronic will prepare monthly written reports for the providers based upon patient specific information downloaded by the company from the devices. The contract specifies that the written reports will be provided exclusively to the hospitals and physicians with which the company contracts and not with the patients from whom the data is gathered. Given that a patient has a right toaccesshis or herpersonal health information, if a patient asks Medtronic for a copy of the report provided to his or her hospital or physician, should the company provide it? (Wall Street Journal, November 29, 2012)