Members of the workforce should be encouraged to report all violations of HIPAA – including those that do not result in a data breach or impermissible use or disclosure of PHI – so that the cause of the violations can be rectified and measures put in place to prevented the violation being repeated. Repeated violations – no matter how little harm they cause – can contribute to a culture of non-compliance, so it is better to prevent them as soon as possible.