For your eyes only : this month insurers face the first of three federally mandated privacy compliance deadlines