Is realtime data monitoring required for HIPAA compliance