Who is responsible for the patient's lost privacy?