Although the compliance deadlines for the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Final Security Rule have come and gone, it still presents major challenges for virtually every provider of health services, no matter how big or small. Covered entities include health plans, health care clearinghouses, and healthcare providers. Business partners and associates who interact with covered entities must also address security issues.