What is the PRIMARY consideration when performing patient assessment in HealthCare Information Security and Privacy Practitioner practice?