Europe is opening up health data: three questions to ask of any privacy guidance