In at least three paragraphs, discuss how security and privacy rules and regulation might affect the day$-$to$-$day operations of a small $($under $100$ employees$)$ health service$-$oriented company