What is data loss prevention and how does it apply to HIPAA