There are many online backup solutions like Mozy backup(
www.mozy.com) and Amazon S3 service. I am not sure if S3 is HIPAA compliant or not, but Mozy is.
I would do everything, manual backup, automatic backup to second internal HD, backup to another share on the network and then the online backup to use something like Mozy. It does not hurt to have multiple copies.