🚩

"The new Security Rule would eliminate the required-addressable distinction, forcing all regulated organizations to comply with the same rules, regardless of circumstance."

https://www.darkreading.com/vulnerabilities-threats/hipaa-security-rules-pull-no-punches