HIPAA Compliance, Site Security, Good Faith