oh lord yes...like a monstrous, you need to be fired one. You can't put phi on any electronic system which you do not have a signed business associate agreement with. I suppose there's a chance that FB signed a baa, in which case this would be their problem, but it seems pretty unlikely to me.