The legal framework for the protection of personal information (health-related) in European Union law