Explaining HIPAA: No, it doesn't ban questions about your va