HIPPA provides specific federal penalties if a patient's right to privacy is violated including:
1. [ [ Non-criminal violations such as disclosures made in error provide civil monetary penalties of $100 per violation up to $25,000 per year per standard.
2. Criminal penalties are provided for certain types of violations of statute that are done knowingly including:
1. up to $50,000 and one year in prison for obtaining or disclosing protected health information
2. up to $100,000 and up to five years in prison for obtaining or disclosing protected health information under "false pretenses"
3. up to $250,000 and up to 10 years in prison for obtaining protected health information with the intent to sell, transfer or use it for commercial advantage, personal gain or malicious harm. ] ] (More)