We are getting info from consultants about having someone come in and audit us to make sure we are HIPAA compliant for all the ACA crap. Does anyone know what needs to be done, and when? I dont want to blow money on stupid BS that we don't need, but I also don't want to to have the feds raid us and incidentally find all the pot plants I keep in the basement.