legal limits of open source in health care