4 ms·
If memory serves the fines stop after 1.5 million. Please someone correct me if I'm misremembering.
by junon 4y ago
If memory serves the fines stop after 1.5 million. Please someone correct me if I'm misremembering.
- deleted 4y ago[deleted]
- warent 4y agoIt looks like the maximum penalty (if corrected within 30 days) is about $450,000 as of 2022. However, there is apparently an addendum to the law that the State Attorney General is authorized to impose civil penalties in addition to this. As we see, Anthem settled for $115,000,000 for a similar breach. So, yeah, unless Cerebral gets a very lenient AG, they're done. https://www.hipaajournal.com/court-approves-anthem-115-million-data-breach-settlement/ https://www.hipaajournal.com/court-approves-anthem-115-milli... https://www.hipaajournal.com/what-is-the-maximum-penalty-for-violating-hipaa/ https://www.hipaajournal.com/what-is-the-maximum-penalty-for...
- time0ut 4y agoThey bumped it to 1.9 for inflation. There are also criminal jail time penalties though. It depends on intent. Unlikely it would happen though even if it is deserved.