Recent Enforcement Action Shows Business Associates Are Not Off the Hook