Implementing HIPAA privacy and security requirements has been a challenging endeavor for healthcare organizations. The 3 most common myths about the law and its related regulatory requirements are presented here along with their true interpretations.