Tag: it is a requirement under hipaa that