TAGs: hipaa privacy rule protects