SPOTLIGHT: Has HIPAA worked?