Sometimes, teams take short cuts with HIPAA compliance “to get the job done” and, when the short cuts are allowed to continue, a “culture of non-compliance” can develop. In such circumstances, it is still a good idea to initially report your concerns to your supervisor unless you have concerns that this may affect your standing among your colleagues.