Corrective Action for HIPAA Violations are a Costly Consequence
A monetary penalty or fine may the least financially burdensome consequence of HIPAA non-compliance, corrective action plans CAPs can be extremely costly and include Office for Civil Rights OCR monitoring and enterprise-wide risk analysis.
Source: natlawreview.com