This includes being familiar with and interpreting legal requirements, monitoring regulatory changes, and applying necessary changes within the organization to maintain compliance. An absence of information about the HIPAA Rules will never excuse an individual or organization from the pen