I received an email yesterday and this is what it said. I sent an email back stating that although it might not be a violation, it is still a problem. If a company says their database is encrypted, but it can be read by some nerd, and nobody else really knows.... Then when something bad happens dentists won't care because they will say the database is encrypted. I once had a client who had a break-in and someone stole the physical server, but Dentrix advertised encryption so my client told the police and etc that it was encrypted... But... I was his IT guy and he knew what I was doing regarding Dentrix, the FTC hadn't ruled on my complaint, so there was this limbo... Well, having an encrypted database sounded much better to my client at the time... so no patients were notified.
