follow The HIPAA Privacy Rule