Negative, Catch. I worked in a HIPPA enviroment. Someone had to sing off on the fire wall and the network...somewhere there are SQ and SOP deaining with the security and network configuration of this envoroment. There would be an investigation (I have been through a fe...not ealign with anyone dieign but some minor compliance violations.). One of three things would be found, either the softwear faild (if the IPS/FIrewall?antivirus faild to catch the worm for whatever reason.) in which case the hospital may well sue the softwear provider to recoup costs of the malpractise suit it gets hit with. Or the softwear was installed/configured improperly, then the guy whos signature and initals are all over the SQ/OQ is in deep ****...he signed off that he did every step in the document...if a step was skiped or missed...well at minimum thats fraud at a federal level. The last possability is that the SQ/OQ was faulty then the architects are in trouble for haveing missconfigured apps to begin with.

The doctor will be hit with malpractice but unless he knew hat what he was doing would harm/kill the patiant he is sheilded from any further criminal charges.

Again my knowladge of hippa dosn't come from reading the doumnts (I did spend two days in class\seminars going over all of the HIPPA documents that relate to IT thogh). Or talking to administrators at a hospital, I was an applications intagration engineer (a combination of a systems archetect and application engineer for that compnay) At a Major pharma for a few years, every thing I did, every system I touched had HIPPA implications, I lived and breathed the regulations for two years..HEll I had auditors threatn me with fraud and jail time for useing the wrong pen, I had to argue with review boards to show that winzip didn't pose a compliance violation. I know what I am talking about.