The American Recovery and Reinvestment Act contains surprising modifications to HIPAA's Privacy and Security Rules that will likely require every business associate agreement to be modified, according to this article from the Wisconsin Technology Network. The Act increases the penalties for various HIPAA violations and dramatically expands other remedial actions such as increasing federal government audits; granting attorneys fees in some HIPAA lawsuits; and allowing a method for individuals to recover penalties under HIPAA.