article thumbnail

What are the Penalties for HIPAA Violations?

HIPAA Journal

Since the introduction of the HITECH Act (Section 13410(e) (1)) in February 2009, state attorneys general have the authority to hold HIPAA-covered entities accountable for the unauthorized use or disclosure of PHI of state residents and can file civil actions with the federal district courts. OCR HIPAA Fines 2019.

HIPAA 122