Building Regulatory Compliance into EHR Systems