As Dr. Tully said, HIPAA laws involve requiring encryption and other protections on certain data, but don't necessarily work against an adversary that is in the hen house, like a fox in the hen house.