Hi Ben,
zSecure does not collect or specifically process any sensitive personal information by itself. Of course, it is possible that you process a security database or external file with it that contains such data. You would have to know that, and know how to handle that; the product is agnostic. You should of course use the HIPAA-compliant way of reporting product issues if you want to report any.
I hope this helps,
Jeroen
------------------------------
Jeroen Tiggelman
Software Development and Level 3 Support Manager IBM Security zSecure Suite
IBM
Delft
------------------------------