We do not request patient-specific data and so the HIPAA Privacy rule is not invoked.