$1.55 million settlement underscores the importance of executing HIPAA business associate agreements