Few HIPAA complaints pursued