Honestly, I probably don't have as definitive an answer as I should. Honestly, I'm usually trying to dispel myths. I think it's a condition of fear more than objective facts.
As I mentioned, we have some clients in health care, and they seem to believe that there are certain regulations on HIPAA compliance and tracking user patient data. We do health care gaming and therapeutic tools and things. I've been told, at least, that there are regulations they need to comply with. Personally, I can't speak to that. I tend to answer the more sort of fear-based questions and rumours rather than specific facts.