Healthcare Application Security: A CTO’s Guide to HIPAA, PDPL and Data Protection