A GUIDE TO THE PERSONAL HEALTH INFORMATION PROTECTION ACT