Perhaps this reflects your experience, in your part of the world. In some parts of the world, principles and ethics do count, and don’t change on a dime (as they do in the US).

Several European countries.

Regardless of the part of the world, corruption happens when the right price gets negotiated.

It can be money, a favour, need to help someone in need, needing to meet specific sales KPIs,...

Shhhh, you’ll scare away the new hires that have to pay the interest on the loans they were told would get them there.

In my experience working at several US health IT companies, company principles for following HIPAA rules (especially patient privacy) were taken seriously at all levels and considered more than just compliance check boxes. Regardless of the ethical issues, if you get a reputation for being sloppy and the trade press writes negative articles then that can kill your sales pipeline.

HIPAA has nothing to do with the usual company values I was talking about.

HIPAA is a certification process for industry deployments.

Nope. There is no certification process in HIPAA for that. Have you read the law?

A way of speaking, it has nothing to do with stuff like "Do no evil", "Respect, Achievement, Renewal, and Challenge", "Excellence, Innovation, and Responsibility" and similar word games with a yearly HR training, just to check a box.