OpenPGP digital signature query

[Robert J. Hansen]

John Clizbe wrote:
> Your interests would be best served by a) hiring the services of a
> security consultant knowledgeable in the dealings of HIPAA specifically
> as it relates to the FDA; b) consulting an attorney knowledgeable in
> technology, c) both of the above.

I'll go one step further: asking this query on an internet mailing list
could itself be seen as failure to exercise due care.  You don't know
any of us here and cannot vouch for anyone's legal or technological
acumen.  As far as due diligence is concerned, asking here -- instead of
asking lawyers and security consultants -- is pretty much reckless
disregard.