Non-compliance with HIPAA regulations can result in significant penalties for small group plans. Penalties can range from monetary fines for failing to safeguard protected health information to more severe penalties for willful neglect of HIPAA requirements. The severity of the penalty often correlates with the severity and nature of the violation.