https://medevel.com/is-hipaa-compliance-mandatory-for-medical-software-outside-the-usa/