An investigator obtains consent and HIPAA authorization from subjects to review their medical records and HIV status. She plans to go back to the medical record, so the HIV status information is stored along with subject identifiers in a database that she keeps on her laptop computer. What are some safeguards she could use to protect subject privacy and data confidentiality?