All U.S. businesses involved in holding, using, or transmitting personal health information (PHI) electronically, must abide by strict HIPAA data security and privacy rules. What does it really take for covered entities to become HIPAA complaint today?