Small clinics used to be able to give lip service to HIPAA. Back then, the HIPAA Police were only chasing the big fish hospitals.
But things are changing. The HIPAA Police are now investigating and penalizing small clinics.
A physical therapy clinic in Los Angeles, with fewer than a dozen workers, was fined $20,000 by the HIPAA Police. It is very risky for small clinics to assume that the HIPAA Police will ignore them.