Comment Re:HIPAA yes... but SARBOX? (Score 1) 122
Small businesses that are third-party providers to publicly traded companies must comply with Sarbanes-Oxley as well.
Someday somebody has got to decide whether the typewriter is the machine, or the person who operates it.