Question: Unlike SOX and HIPAA, PCI standards are not government regulations they are produced commercially. Discussion in 500 words or so the difference between government regulation and commercial standard setting.
Considering that some people seem willing to post just about any personal data on the Internet, how reasonable do you feel that the HIPAA rules for database security and the penalties for violations are? Please write 750 words showing your understanding of HIPAA compliance rules.