what you need to know and spotting hipaa privacy protection