January 12, 2007HIPAA security guidance for off-site use of electronic protected health information (EPHI)