The Privacy Rule does not require that a document be notarized or witnessed.