Reasonable precautions. I've been top IT management in healthcare for 8 years, I'm very well versed with this concept. HIPAA isn't "PHI is Eyes Only Secret!" it's "you have to take reasonable precautions to safeguard data from bad actors." I have a wall between the rooms, each room has doors, and when the doc is talking with you, you can't hear a lot from the next room over. We don't have to make walls soundproof and doors sealing airlocks.