Part A: Healthcare is not the only industry that has strict privacy and security regulations; for example, the financial industry also has very strict regulations.
Yet, there seems to be a continuing failure to adequately address privacy and security in order to satisfy the interested parties.
Why do you think we still see the large breaches we do?
Why do you believe it has been so difficult to compel compliance?
What can be done to improve the situation?