Lawsuit Sets Disturbing Precedent for HIPAA Compliance