Question:

Which one of the following compliance obligations is most likely to be applicable?
Gary is performing a penetration test of a healthcare organization in Alabama and is considering the compliance issues associated with the test.