Discussion on the management and application of medical data under the implement of “Act on the Protection of Personal Information”