Compliance is never a once-and-done exercise. You’ve got to find a way to get there and stay there.

I kept saying to her ‘I have to get in touch with Karen’. This went on for about six months.

I was very nervous. I didn’t know what to expect because I hadn’t seen Karen for 20 years. She hadn’t changed a bit, she was still the same girl.

They have the same number of regulations to comply with as larger organizations, but they don’t have the full time staff to cover them.

On one end, you’ve got a lot of the providers and small and midsize hospitals flying by the seat of their pants because within HIPAA there are provisions for financial penalties and jail time but...