Workforce mobility presents new challenges to health care IT groups responsible for HIPAA security compliance.