Privacy and security laws regarding medical records handling etc. My wife runs a medical practice and needs to conform to HIPAA by April 2003. I did considerable research - see http://haknwak.shacknet.nu:911/hipaa_research - looking for a nice, simple but concise, guide to achieving conformance.

Any help or experience would be greatly appreciated.