Bob recently accepted a position as the information security and compliance manager for a medical practice. Which regulation is likely to most directly apply to Bob's employer?
A. Federal Information Security Management Act (FISMA)
B. Health Insurance Portability and Accountability Act (HIPAA)
C. Children's Internet Protection Act (CIPA)
D. Gramm-Leach-Bliley Act (GLBA)