The primary responsibility of the compliance officer will be to ensure that the organization complies with all applicable laws and regulations. An absence of data about the HIPAA Rules is not going to justification someone or organization from a penalty from the event of a HIPAA violation