HIPAA rules for database security

Considering that some people seem willing to post just about any personal data on the Internet, how reasonable do you feel that the HIPAA rules for database security and the penalties for violations are? Please write  500 words showing your understanding of HIPAA compliance rules. Consider specific aspects of the rules and exceptions including safe harbor.

Cite your sources in-line and at the end. Provide a URL for your citations.