I was very nervous. I didn't know what to expect because I hadn't seen Karen for 20 years. She hadn't changed a bit, she was still the same girl.

I kept saying to her 'I have to get in touch with Karen'. This went on for about six months.

On one end, you've got a lot of the providers and small and midsize hospitals flying by the seat of their pants because within HIPAA there are provisions for financial penalties and jail time but no real enforcement mechanism.

They have the same number of regulations to comply with as larger organizations, but they don't have the full time staff to cover them.