> "It'd be cool if you kept that data encrypted at rest and kept track of every time it's accessed. Oh, you guys have a physical form everyone fills out when they access files? Perfect." - HIPAA in practice