The stimulus bill that was recently passed and signed into law contains surprising modifications to HIPAA's Privacy and Security Rules. Most importantly, the bill increases penalties for various HIPAA violations and dramatically expands remedial actions.