Obviously the government doesn’t have the money or the manpower to be certain that every covered entity complies with the HIPAA regulation. But the government does have the authority to launch its own compliance reviews, and while it’s unlikely that it will initiate these reviews right away, patients can complain anytime. If, as a result, the government does investigate your practice, your good-faith effort to have privacy policies and procedures in place will be important.
