Answer:

Enforcement of the transactions and code sets, security, and unique identifier standards of the Health Insurance Portability and Accountability Act of 1996 (HIPAA) will be primarily complaint-driven. Upon receipt of a complaint, CMS will notify the filed against covered entity of the complaint, and provide them with an opportunity to demonstrate compliance, or to submit a corrective action plan. If the covered entity does neither, CMS will have the discretion to impose civil monetary penalties.