Texas agency slapped with $1.6 million HIPAA fine