I have a few questions about supporting a customer that has to adhere to HIPAA regulations.
1. If a client never comes to us with a business associate agreement, and we still support them are we liable?
2. If a client does not take our recommendations, are we liable?
3. If a client was compliant by the September dead line - what risk is there if we get them compliant with in a month or so?