 How do you store patient information? (HIPAA Compliance)
patrickgzill: You might want to look into data blinding, stronger/stricter permissions, and even audit tables (if data changes, insert a duplicate of the row into a separate audit table).However as long as you have it internally set up (not on the Internet) and make encrypted backups (so stolen backups are worthless) your risk will be much less.