If you're going to try to invoke laws that you do not fully understand, you should at least try to abbreviate them correctly. It's not HIPPA; it's HIPAA.