https://lirneasia.net/2018/10/preliminary-thoughts-on-a-health-data-protection-policy-for-sri-lanka/