Regulatory and ethical considerations for linking clinical and administrative databases