What is the penalty for not complying with the HIPAA Security Rule?
HIPAA provides for civil and criminal penalties for failing to comply with security rule. How the penalties are enforced and the degree to which they are enforced is based on the actions of a covered entity took as soon as they became aware of violations involving the security rule. This means that we have to make a good faith effort to adhere to requirements in the security rule. The consequences for criminal violations of the HIPAA Security Rule may include fines of up to $250,000 and imprisonment.
Related Questions
- Do the HIPAA Security Rule requirements for access control, such as automatic logoff, apply to employees who telecommute or have home-based offices if the employee accesses electronic PHI?
- Does the HIPAA Security Rule require the use of an electronic or digital signature?
- What is the penalty for not complying with the HIPAA Security Rule?
