The practice of maintaining the security and confidentiality of patient records. It involves both the conversational discretion of health care providers and the security of medical records.