Common Law and medical privacy (vac status)