If you think your business has a low risk of incurring fines for violating the privacy requirements of the Health Insurance Portability and Accountability Act (HIPAA), think again.