Failing to comply with HIPAA can lead to federal enforcement action, and this enforcement action can be either civil or criminal in nature depending on the specific issues involved. Providers and other businesses can face substantial fines, and owners, executives, and other individuals can face fines and prison time. Noncompliance presents a risk for unauthorized access to patients’ private information as well, and this can lead to substantial civil liability irrespective of any government enforcement activity (or lack thereof).