conceptualizing the lifecycle of PHI in your practice HIPAA as a useful tool for ethical client care how often to do a risk analysis how risk analysis is essential to safeguarding PHI mandate of the HIPAA Security Rule security measures degrading over time written policy vs. implemented policy