Remember – even without a security breach, all it takes is one disgruntled employee to make a phone call and report violations. The fines are very high. It is much less expensive to put in policies and plans now.