Not only was this reply pertinent, it led me to other essential information to make a solid HIPAA policy notice.