The HIPAA privacy rule: A decade of enforcement