Many people and entities that conduct business with healthcare entities are subject to newly effective federal regulations that expand the privacy and security requirements of HIPAA. Failure to comply could result in civil or criminal liability and large monetary penalties.