ai arbitration hipaa privacy compliance