Regulations aimed at protecting the security and privacy of organizations and individuals are well meaning. But sometimes these standards can be more than a nuisancethey can actually contribute to weaker security. Many organizations are under the mistaken impression that compliance with the Health Insurance Portability and Accountability Act (HIPAA) requires encryption. In fact, HIPAA requires the appropriate use of encryption, which is quite a different standard and can mean the difference of millions of dollars, Gartner says. The solution, again, is to more clearly think through how compliance standards should be implemented.”]
Source: https://www.csoonline.com/article/2134254/7-ways-to-work-around-security-compliance-problems.html