"Like covered entities, business associates must now comply with HIPAA or face draconian penalties. As many businesses have recently learned, even seemingly minor or isolated security lapses may result in major fines and business costs. Fortunately, business associates may avoid mandatory fines and minimize their HIPAA exposure by taking and documenting the steps outlined above. Business associates may use this outline to evaluate and, where needed, upgrade their overall compliance."