In “Ongoing Best Practices for HIPAA,” Dan discusses the importance of ongoing HIPAA compliance efforts, such as staff training to be aware of PHI in context, and having policies and procedures in place to address how to mitigate HIPAA violations when they happen. This advice is all premised on the assumption that, at some point, something will go awry with HIPAA compliance. Nobody bats 1.000, but when things inevitably go wrong, effective preparations can help minimize the negative impact of the violation, and potentially avoid fines.