HIPAA Criminal Penalties by Type of Violation (36)
| Violation category | Fine | Incarceration |
| Knowingly obtain or disclose PHI | Up to $50,000 | Up to 1 y |
| Under false pretenses | Up to $100,000 | Up to 5 y |
| Use PHI for personal or commercial gain or to cause harm | Up to $250,000 | Up to 10 y |