The HIPAA Privacy Rule: How May Covered Entities Use and Disclose Health Information