This article from Harvard may be of interest to you if you are getting ready to do a survey on your campus. "Drug Records, Confidential Data Vulnerable" http://www.thecrimson.com/article.aspx?ref=505402 .
The site that provided the loophole mentioned in the article was one that allowed people to design and conduct surveys.