a principle of professional ethics requiring providers of mental health care or medical care to limit the disclosure of a patient's identity, his or her condition or treatment, and any data entrusted to professionals during assessment, diagnosis, and treatment