updated hipaa policy.docx