Constraints towards complying with the HIPAA