The changing data protection landscape and challenges in the use and disclosure of patient health information for research and innovation