In understanding the basics of a healthcare compliance program, one must know the 7 elements of an effective program and be able to identify the laws and regulations (HIPAA Privacy and HIPAA Security) that pertain to data protection as well as the privacy obligations that can apply to complex organizations. One of the challenges of implementing privacy and security is buy-in. What are some problems that can be experienced when implementing privacy and security? What are some ways to cultivate buy-in?