tom was injured on the job. according to hipaa, which individual or group would have the right to access his protected health information regarding that job injury?