https://www.lifars.com/2017/01/how-to-avoid-bad-hipaa-compliance-practices/