>>>I'm gonna watch that one!
>
>Great- I know you work in healthcare so will be especially sensitive about PHI. FWIW I had a colleague who was one of the original team in a large US healthcare consultancy with shares that promised her a comfortable retirement, until careless security caused a HIPAA breach that cost them statewide deals and decimated the company. They paid millions in penalties, delisted, recovered, and renamed... only to be hammered by a ransomware attack last year. Nobody is immune. No thanks!

Yup HIPAA violations can capsize a company quickly -- every single thing I create or data I extract is a rather long drawn out process to ensure security and that the data being provided is limited to only what the request is and that the request itself follows a bunch of rules and guidelines. Better safe than sorry. Often times when I make a code change to a program it takes me longer to go thru the approval process to release it to production than it did to do the code change in the first place lol.