HIPAA compliance is required for entities handling PHI, and companies and individuals who violate HIPAA standards will face penalties ranging from fines to imprisonment.