BACKGROUND: In 1996, the Minnesota legislature passed a medical data privacy act requiring patient authorization for the use of medical records in research. Other state legislatures and Congress are considering ...