What a story. The part that surprised me the most was "Legal has never heard of HIPAA." HIPAA is major legislation (almost as influential as a Constitutional amendment) and has tentacles in every field, so how is it possible that an attorney (even an incompetent one) has never heard of it? I would never trust legal advice from an attorney who hasn't heard of HIPAA.