Hospital near me has password requirements for their electronic medical records system as:

• 6 characters, no more, no less
• 2 characters must be a number
• 4 characters must be a letter
• case insensitive
• never changed

And for new hires and what not, they tell them to use {hospital abbreviation}{2 digit year}. Like casu24

No freaking wonder