rephrase Some CEs believe there's an alternative to compliance. Small or understaffed organizations try to avoid expenditures and don't allocate enough of their budget to implement a reliable HIPAA compliance program, choosing instead to focus on their HIPAA certification rather than the actual compliance process