Beyond the HIPAA privacy rule | lit.salon