HIPAA
If you are managing confidential information, it’s best to think of the Standards for Privacy of Individually Identifiable Health Information as the Holy Grail. The term, “compliance” does not sound fanatical enough. This is a way of life that is documented in a policy and procedure manual.
Would you agree that this is no place for on the job training? This is not for wannabes. It takes trained, committed personnel. You add in encryption and SFTP sites for data security. You obsess about quality assurance that protects against unauthorized disclosure. You spend money and time maintaining a secure facility that protects against documents and data removal.
Know any good HIPAA jokes? That was a test. You never joke around with a Compliance Officer.