Here's the combined rules. The security rule starts on page 38. http://www.hhs.gov/ocr/privacy/hipaa/administrative/privacyrule/adminsimpregtext.pdf http://www

Here's the combined rules. The security rule starts on page 38. http://www.hhs.gov/ocr/privacy/hipaa/administrative/privacyrule/adminsimpregtext.pdf http://www.hhs.gov/ocr/privacy/hipaa/administrative/privacyr... >they mostly piss on open source At the top, they guys with stars who sign off the contracts, yes. On the other hand, I was just on the phone yesterday with a Navy cryptographer who is working with Google on NIST certification of Mozilla's Network Security System (NSS) for FIPS 140-2 compliance. I think getting the network changed will ultimately come down to smart people like yourself continuing to beat the drum. BTW, I'm military too! I know CHCS and AHLTA all too well. email me: niels.olson at gmail