HIPAA is intended to keep protected health information (PHI) safe and secure. HIPAA compliance is essential for covered entities and business associates and means abiding by the HIPAA Rules. Your company must implement and document comprehensive administrative, physical, and technical security safeguards.