For the uninitiated (as I was): it’s a set of rules that determine how medical records must be stored, and the consequences associated with leaking them: https:

For the uninitiated (as I was): it’s a set of rules that determine how medical records must be stored, and the consequences associated with leaking them: https://www.hhs.gov/sites/default/files/ocr/privacy/hipaa/administrative/combined/hipaa-simplification-201303.pdf https://www.hhs.gov/sites/default/files/ocr/privacy/hipaa/ad... Page 24 specifies “Amount of a civil money penalty”.