Any entity handling personal electronic healthcare information therefore should take the initiative to ensure compliance.