Can anyone tell me what risks an IT worker,
coding software that is supposed to be HIPAA
compliant, takes on by doing so? For instance
supposing there is a software bug that
allows a hacker to get access to health
information? Does the IT worker bear the
brunt of the punishments that HIPAA metes out,
be they civil or otherwise, or does the
company or other organization that he is working
for bear those?
Thanks.
