Comment by pg_bot

Given that you are dealing with medical data that falls outside of HIPAA what are you doing to ensure that PHI remains secure?