HIPAA was enacted in 1996 and requires health care providers and organizations (also known as Covered Entities), as well as