How long before a session expires?

In order to be HIPAA compliant we have to end our session after a period of 30 minutes of inactivity.