Click https://www.theregister.co.uk/2015/10/20/western_digital_bad_hard_drive_encryption/ to read the full article. Also, download the full paper in our RESOURCES section "On the (in) security of self-encrypting drives

“The final rules, effective on March 26, 2013, not only provide direct liability for business associates and their subcontractors, but also include increased liability for noncompliance. The final rules move HIPAA enforcement away from the previous voluntary compliance framework and toward a penalty-based system. The tiered penalty structure has penalties ranging from $100 to $50,000 per violation, depending on the level of culpability, with a $1.5 million cap per calendar ye