Failure to maintain compliance with the Health Insurance Portability and Accountability Act (HIPAA)—particularly when it leads to exposure of protected patient health information (PHI)—can have serious consequences for an ASC.