This depends on the consequences. The failure to provide necessary and appropriate training may not result in a HIPAA violation, in which case nothing will happen. At the other end of the scale, if a patient complains to HHS´ Office for Civil Rights about an impermissible disclosure, and an investigation into the complaint finds your employer is at fault, they will be sanctioned. However, there is a gray area in the middle of these two scenarios in which your employer provides you with the training necessary to tick the box of organizational compliance, but the training is not appropriate to your role. If a violation occurs, your employer could claim you are at fault for not applying the “necessary” training to your role – which is why it may be important for you to take responsibility for your HIPAA knowledge and how HIPAA applies in your role.