. "The cost comes in many forms, including the paper and printing of the Notice of Privacy Practices that each patient must receive, but also in the time we must spend educating patients and documenting our compliance." . . .