JP speaks the truth, there are certain times when you just gotta call in an expert that nows the specific regulations.
You don't build a house with out first consulting the local building codes, and you certainly don't go putting patient records online without following HIPPA.
The implications of not are incredible. I read a very scary article one day about how open a lot of doctors offices are in regards to keeping electronic documentation, I wish I had it book marked, but it made you wonder about your medical provider and whether you should expect your identity to get "borrowed".
Quite scary!!!

Peace,
Dhej