Protecting the data in electronic health records did not start with the advent of HIPAA, as many people think. Protecting health records has been a critical requirement in the healthcare space since the computers became a fixture in hospitals. However, HIPAA added public reports of fines issued for covered entities’ failure to properly protect data contained within EHRs. Many people assume that EHR data has limited value to unauthorized users. Who cares about my blood test results, or that I just visited my dermatologist?