More and more organizations are finding that they collect, access and even store protected health information (PHI), even if they are not actually in the healthcare industry. The risks and penalties associated with the mishandling or inappropriately releasing PHI are very serious so we advise a conservative approach. During the assessment phase of your Concord Compliance project, we help you walk through the data you are collecting and how you are using it to see if HIPAA needs to be part of your compliance program.