HIPAA is around to protect our privacy. It doesn't do a great job but it's better than nothing.
Congress is going to give health care entities an exception to notify people if they get broken in to as long as they use cryptography.
Not only are specifications of crypto not set for standards or implementation evaluation is this exception.... IT SHOULDN'T FUCKING MATTER.
IF YOU LOSE MY DATA, I WANT TO KNOW!!!!!
NOTHING ABOUT THIS IS OK.
Congress needs to get punched in the face!