Understand what is written – and what is not – in HIPAA requirements, says Chad Peterson, managing director at NetSPI.