> "It'd be cool if you kept that data encrypted at rest and kept track of every time it's accessed. Oh, you guys have a physical form everyone fills out when they access files? Perfect." - HIPAA in practice

Wholesalers don't have patient data. They sell to pharmacies. Still VERY valuable data, but HIPPA shouldn't be an issue.