Failure to comply with HIPAA can be likened to a speeder caught by traffic police - there will be penalties. Depending on the severity of the violation, these can range from fines to criminal charges. Additionally, it can result in reputational damage that can impact an organization's trustworthiness in the eyes of patients and partners.