The ‘narrow scope’ of HIPAA: Protecting patients in an age of digital growth