This important piece of legislation is designed to protect all users of health services, from patients to policyholders. It is important that each health facility and its business partners fully understand their HIPAA responsibilities. Failure to comply with HIPAA has serious consequences. In the event of a data breach, health organizations and their trading partners must inform the individuals concerned. If any of these organizations violate federal law, they could be reviewed and fined or even prosecuted.