HIPAA requires a small medical practice to do three things: know where its patient data lives (a documented risk analysis), protect that data
<h5 class="widget-title mb-3">Recent Post