Information security and privacy in the health care sector is an issue of growing importance but much remains to be done to address the various issues raised by health care consumers regarding privacy and security and the providers' perspective of regulatory compliance.