Understanding HIPAA compliance is the basis to be legally tenable