Health care giant agrees to pay $46m to customers in privacy settlement