If I've read the HIPAA information correctly, ANY medical facility with sensitive records must comply. Sure, expensive hardware and dedicated servers are fine for hospitals and large organizations, but what about dentist offices? Chiropractors? Physical Therapists? Often these are very small offices with sometimes just a doctor and receptionist and one or two computers.
There are other viable reasons why an office would not choose to go with a dedicated server for their data. It isn't a dumb question.
If I've read the HIPAA information correctly, ANY medical facility with sensitive records must comply. Sure, expensive hardware and dedicated servers are fine for hospitals and large organizations, but what about dentist offices? Chiropractors? Physical Therapists? Often these are very small offices with sometimes just a doctor and receptionist and one or two computers. There are other viable reasons why an office would not choose to go with a dedicated server for their data. It isn't a dumb question.