We're kicking a medical product idea around, and my understanding of HIPAA is basically "that sounds scary".  I know there are a few people around here who are doing medicine related startups, and I hope one of them can point me to some resources for understanding what a technology provider needs to account for.<p>I know step #1 should be "talk to a lawyer", but I'd really like to understand as much as I possibly can beforehand.
Ask HN: Is there a HIPAA for dummies for medical startups?