[dataviz1000]

With HIPAA you have to track and store the information every person who touches or reads the medical chart. The issue was more to do with random people reading medical charts.

It isn't difficult to bring the process into compliance. I offered to make an app which would have been easy because there was a predefined workflow that can be diagrammed on a sequence chart in about 10 steps. There were a couple interactions between the lawyer and the doctor. Then a step where the insurance company is notified. Then a lawsuit filed if not paid. At one point, I was researching how to store data in HIPAA compliance in the cloud. It was about 2 years later when AWS provided HIPAA compliant EC2 instances. I offered to build the app for $10,000. Having random people pour over private medical charts and undocumented and haphazard communication between the lawyers, insurance company, and doctors through email and text messages was a mess.