A proposed architecture and method of operation for improving the protection of privacy and confidentiality in disease registers - Churches, T (BMC Med Res Methodol, 2003)