select the three classification of people that a healthcare provider has to deal with in regards to the hippa privacy standard