RECR: Protecting Subject Data in a Longitudinal Clinical Survey