PRIVACY LEGISLATION and ACCESS TO RECORDS