Why does a medical office need to have clear policies in place for dealing with discrepancies in patient information?