outline the steps a medical assistant can take to ensure HIPAA compliance in the handling of patient information