What protections are provided by HIPPA? What are the consent and authorization? What information is protected, when is it not protected at all?