Overcoming the pain of HIPAA enforcement