Surfacing applicable state-level healthcare privacy obligations during discovery and how they constrain Health Cloud design