security law privacy public key infrastructure ethics public-key cryptography regulatory compliance key management data privacy health insurance portability and accountability act privacy law transition to the new order