A previous company I worked for was scared to death of holding any records that may be classified as health records because of the regulatory implications.