That HIPAA requirement is totally open to interpretation. Windows screen saver popping up could be all that's required to be compliant.

>The message box timeout, I find very helpful in my application because I can't leave data on the screen forever due to HIPAA regulations. A message box that has not been closed, prevents a good clean shutdown of the application.