US Health & Human Service's Office of Civil Rights is responsible for HIPAA Privacy & Security. Here's a link to information about their audit program and results http://www.hhs.gov/ocr/privacy/hipaa/enforcement/index.html