To maintain HIPAA compliance, treat it as a recurring routine with one accountable owner and monthly, quarterly and annual checklists.