Information technology is a crucial, albeit costly endeavor for HIPAA-impacted organizations; in response, regulatory bodies have ramped up auditing and enforcement efforts in hopes of stifling the seemingly daily barrage of medical data breaches splashed across the headlines. For non-compliant organizations, the cost of non-compliance could include civil, criminal, and other penalties.