I would take this very seriously as it can mean more than just losing a few clients. I just read this on a website: "With HIPAA penalties as much as $1.5 million per violation, health-related businesses can't afford to not be HIPAA compliant, and this extends to their business partners...