10 Steps that Businesses should take to Comply with HIPAA