Does HIPAA scale for a physician practice? Is HIPAA compliance mandatory?

HIPAA sounds like "hippo" for a reason: it's big, clunky, noisy, and unwieldy. Can, and should, a small physician practice implement HIPAA practices? HIPAA Is it worth the effort?