I work with a software development shop that targets healthcare companies. I've read through various HIPAA guidelines and recommendations and it seems like a monumental amount of work to be compliant - but the company head interprets HIPAA as just recommendations and that it's all subject to interpretation, so he's "not too intimidated by it".
Am I over-reacting in expecting religious-like adherence to whats outlined in HIPAA - or is it really more just a set of recommended guidelines?
Am I over-reacting in expecting religious-like adherence to whats outlined in HIPAA - or is it really more just a set of recommended guidelines?