D.C. District Court Limits the HIPAA Privacy Rule Requirement for Covered Entities to Provide Access to Records