How can the approver get to see the protected fields in an HIPAA compla