Does right to privacy supersede right to medical history?