Health care providers, Hospitals, clinics all have the sole responsibility of providing a department that provides security in HIPPA information for its clients- they have the required technical expertise plus understand the current HIPPA laws. The Management role is a top priority for all Health care providers.
I hope this may help- Good Luck.