CMA publishes a policy on patient privacy that includes guidance and key ethical considerations for physicians