Building a Legal and Ethical Framework for Patient-Centered Outcomes Research: Identification and Definition of Legal, Regulatory, and Policy Gaps in Privacy and Security Protections Academic Article