HIPAA Security & Privacy Rule readiness for digital health. Realistic timelines, costs, and the controls that fail audits in this vertical.