Why HIPAA compliance is becoming more challenging