What are the implications of failing to comply with the HIPAA privacy regulations?
HIPAA carries with it two potential sanctions for noncompliance. HIPAA imposes criminal penalties for the knowing and wrongful disclosure of individually identifiable health information. The penalties range from a fine of not more than $50,000, imprisonment for not more than one year, or both. If the offense is committed for personal gain or for a malicious purpose penalties become more severe and may include a fine of not more than $250,000, imprisonment of not more than 10 years, or both. The statutes and regulations provides that the Secretary of the Department of Health and Human Services may also impose a civil monetary penalty of no more than $100 for each violation up to a calendar year maximum monetary ceiling of $25,000.
