Indiana AG holds hospital accountable for patient privacy and confidentiality