In 2013, the U.S. Department of Health and Human Services (HHS) adopted sweeping changes to the Health Insurance Portability and Accountability Act of 1996 (HIPAA) that substantially altered rules on privacy, security, and breach notification and increased penalty amounts for…