Ensuring patient privacy in data sharing for postapproval research