New legal developments herald big changes for HIPAA compliance in 2025