The Healthcare Insurance Portability and Accountability Act requires that a person within a covered entity or business associate is assigned the duties of a HIPAA Compliance Officer. This may be an existing employee or a new position.