The author of a clinical policy states: 'All staff must complete annual HIPAA training; failure to comply may result in disciplinary action.' The word 'may' indicates ____.