Children’s Hospital of Minnesota is one of the largest independent pediatric health systems in the United States, with two hospitals, twelve primary care clinics, six rehabilitation and nine specialty care sites. As a healthcare nonprofit, Children’s Minnesota is subject to HIPAA regulations and must ensure that personal health information (PHI) is secured, both at physical locations and within electronic health records and exchanges.