Towards a model for risk and consent management of personal health information. - Scott Buffett; T. A. Kosa (PST, 2006)