Before the release of a new healthcare application into the market.
After significant changes to the existing application, i.e., new functionality.
After updating HIPAA regulations.