HIPAA tips: are you correctly informing your clients of their rights?