Clinical Information Systems (CIS) have emerged as a new critical infrastructure that influence affordability and security of health care delivery. Complex and conflicting societal requirements, such as providing control for patients over their personal health information and requiring health organizations to assure the security and privacy of patient-specific information, create significant technical challenges for the design of CIS.