If in the course of providing health insurance to Federal ee’s, there is PHI, and therefore CUI, wouldn’t there be contract clauses that require protection…or is the company providing the service left to figure out protection requirements, i e assume at least 800-171