Subpart C. Subpart C—Obligations—What Must Covered Entities Do?