hipaa includes in its definition of research activities related to