5 common questions about HIPAA, answered