Risk vs. Access Tightest Security (not useful) ›Write-only databases ›Passwords too complex to remember Weakest Security (not protected) ›No logins.
HIPAA Overview
Tales From Facebook Daniel Miller, 2011