HIPAA Musings: Random Thoughts on Privacy and Security