Compliance with the federal Health Insurance Portability and Accountability Act (HIPAA) will require the health care industry to change processes and systems that will result in significant costs. We recommend that the Legislature approve the funding to support HIPAA compliance activities but recommend the enactment of state legislation providing an appropriate policy framework to govern HIPAA compliance activities.