Comment by sbarre

The key takeaway from that article, for me, is that the government body that is supposed to monitor, enforce, and penalize organizations who fail to follow the HIPAA rules is basically doing nothing.

So with no consequence to these massive lapses, why would these companies care?