HIPAA, general information