Identify the federal law that governs Protected Health Information (PHI) and briefly discuss the elements of compliance. Describe two specific examples of improper privacy disclosure and discuss the challenges of maintaining strict confidentiality in a medical office setting.