Privacy rule complaints, 2003-2009