i https://www.recordnations.com/articles/history-hipaa/
ii https://searchhealthit.techtarget.com/definition/HIPAA
iii http://hipaa.bsd.uchicago.edu/background.html
iv https://www.hipaajournal.com/why-is-hipaa-important/
vi https://searchhealthit.techtarget.com/definition/HIPAA
vii https://www.hipaajournal.com/hipaa-history
viii https://www.hhs.gov/hipaa/for-professionals/privacy/laws-regulations/index.html
ix https://www.hhs.gov/hipaa/for-professionals/security/laws-regulations/index.html
xi http://www.ehcca.com/presentations/HIPAA4/1_02.pdf
xii https://www.hhs.gov/hipaa/for-professionals/breach-notification/index.html
xiv https://dese.mo.gov/sites/default/files/se-compliance-procedural-safeguards-english-august-2009.pdf
xv http://www.hipaasurvivalguide.com/hipaa-security-rule.php
xvi https://compliancy-group.com/what-is-the-hipaa-safe-harbor-provision/
xvii https://www.hipaajournal.com/hipaa-business-associate-agreement/
xviii https://www.hhs.gov/hipaa/for-professionals/privacy/guidance/business-associates/index.html