What are covered entities required to do under hipaa?

previous post