As BYOD (bring your own device) continues to gain in popularity among employers, some industries may face serious risk—particularly the health care industry.

According to a survey released last year by Aruba Networks, 85 percent of hospitals allow BYOD among their employees. But some warn, with the new rules under the Health Insurance Portability and Accountability Act (HIPAA), hospitals are walking a fine line with regard to possible violations—each of which could mean a $50,000 fine.

The new rules, which went into effect earlier this week, requires business associates that handle patient health information as part of the services they provide to these covered entities to adhere to all HIPAA rules. Additionally, they increase patient privacy protections, explain new rights to people to access their health information, and give the Department of Human Services greater ability to enforce the law.