Figures link was removed.
I'll wait until the last moment to upgrade the SQL sever.
As for being not compliant, if the HIPAA police find out, then you get a big fine. As for how they would find out "...members of Covered Entities´ workforces are granted whistle blower protection for reporting non-compliance."
Basically, disgruntled ex-employees.