For health information privacy and security, are the legal and regulatory requirements for students different from those for regular members of the healthcare workforce?