HIPAA by the numbers