About HIPAA

How does it Concern Me?

• Establish Accountability for Medical Records Use and Release - penalties for covered entities that misuse personal health information are provided in HIPAA
• Civil penalties - Health plans, providers and clearinghouses that violate these standards would be subject to civil liability. Civil money penalties are $200 per incident, up to $25,000 per person, per year, per standard.
• Federal criminal penalties - there would be federal criminal penalties for health plans, providers and clearinghouses that knowingly and improperly disclose information or obtain information under false pretenses. Penalties would be higher for actions designed to generate monetary gain. Criminal penalties are up to $50,000 and one year in prison for obtaining or disclosing protected health information; up to $200,000 and up to five years in prison for obtaining protected health information under "false pretenses"; and up to $250,000 and up to 10 years in prison for obtaining or disclosing protected health information with the intent to sell, transfer or use it for commercial advantage, personal gain or malicious harm.