Flexibility is the hallmark of HHS's final rule on ensuring the security of HIPAA protected health information.
