Comment by specialist

Not true. HIPAA was a non-issue for my team. Mid 2000s.

Further, having any kind of regulations, rules, procedures whatsoever would have been a huge boon. Instead, we had to invent everything ourselves.

I actually called up lawyers (and others) involved in court cases, asking for pointers. "Try harder" was the answer.

Sadly, I could never figure out how to code "try harder".