Figures link was removed.

I'll wait until the last moment to upgrade the SQL sever.

As for being not compliant, if the HIPAA police find out, then you get a big fine. As for how they would find out "...members of Covered Entities´ workforces are granted whistle blower protection for reporting non-compliance."

Basically, disgruntled ex-employees.