Enforcement provisions now require a formal investigation if a complaint (and the preliminary investigation of the facts) indicates a violation was due to
willful neglect.3 Covered entities and business associates must carefully
consider the status of their HIPAA compliance program.