Gina Marie Stevens, Compliance with the HIPAA Medical Privacy Rule (CRS Report RS21505) (Apr. 24, 2003) (full-text).