problems with HIPAA 5010