Healthcare organizations face increasingly complex privacy and security issues as they cope with new technology, but many organizations are still struggling with the basics of establishing a compliance program. A natural place to begin is a code of conduct, and policies and procedures.