In-Depth: Sorting out the confusion around what HIPAA covers