I don't buy this. I'm not an expert on S.O. but I'm close to one in regards to HIPAA. As far as HIPAA is concerned as long as you have a Business Associate Ag

I don't buy this. I'm not an expert on S.O. but I'm close to one in regards to HIPAA. As far as HIPAA is concerned as long as you have a Business Associate Agreement that clearly spells out the privacy level expected from the other party you aren't going to get in trouble for a HIPAA violation.