adding hipaa