The HIPAA Security Rule is usually the focus for companies, but the Privacy Rule is equally as important for any organization with patient data.