Department of Health and Human Services, Standards for Privacy of Individually Identifiable Health Information (known as the HIPAA Privacy Rule or Privacy Rule), 65 Fed. Reg. 250, 82462 (Dec. 28, 2000) (incorporated at 45 C.F.R. Parts 160 and 164); modifications to the Rule, 67 Fed. Reg. 157, 53181 (Aug. 14, 2002) (incorporated at 45 C.F.R. Parts 160 and 164) (full-text).