Products that handle U.S. patient health data must adhere to the Health Insurance Portability and Accountability Act. How does this affect engineering team choices?