Text this: Towards implementing a privacy policy: an observation on existing practices in hospital information system