Who is Paying Attention to Security and Privacy While Implementing Electronic Health Records?