Ask HN: Is anything in HIPAA actually required?
I work with a software development shop that targets healthcare companies. I've read through various HIPAA guidelines and recommendations and it seems like a monumental amount of work to be compliant - but the company head interprets HIPAA as just recommendations and that it's all subject to interpretation, so he's "not too intimidated by it".Am I over-reacting in expecting religious-like...