It Provides: significant mitigation of civil liability
I realize it does not mesh well with the narrative you are trying to advance but take a look at the difference in HIPAA fines for an individual/organization that demonstrated reasonable diligence and another that willfully neglected HIPAA:
Per violation Annual Maximum
Reasonable Diligence $100 $25,000
Willful Neglect $50,000 $1,500,000
I realize it does not mesh well with the narrative you are trying to advance but take a look at the difference in HIPAA fines for an individual/organization that demonstrated reasonable diligence and another that willfully neglected HIPAA:
http://www.ama-assn.org//ama/pub/physician-resources/solutio...