Due to their violations of patient rights, covered entities and business associates are now facing increasing enforcement actions. In a breach, both parties bear financial and reputational risk. Shawn DeGroot recommends proactive compliance officers prioritize their agreements based on risk, establish communication channels, and collaborate on risk analysis to protect their organization.