Text this: Towards a model for understanding failures in health data protection