http://www.inforisktoday.com/interviews/will-pending-ocr-rule-impact-breach-class-action-suits-i-3499