Defining Covered Entities, Business Associates, and HIPAA Breaches