HIPAA treats encryption of health information as an addressable safeguard | Yap