The American Recovery and Reinvestment Act (ARRA) became law in 2009 because of concerns of possible data breaches with EHR. Part of this act includes ________________, which is described as "HIPAA on steroids" because it greatly expands HIPAA compliance regulations.