Why is my EHR vendor not taking care of everything I need to do about privacy and security?

Your EHR vendor may be able to provide information, assistance, and training on the
privacy and security aspects of the EHR product. However, EHR vendors are not responsible
for making your practice compliant with HIPAA Privacy and Security Rules. It is solely your
responsibility to have a complete risk analysis conducted.