Specifically, the time and resources investment required to implement systems to track and monitor uses and disclosures of PHI, including for treatment, payment, and operations and to closely monitor uses and disclosures by business associates is costly relative to benefit.