What steps must be followed in order to keep it private?

Take all necessary steps when handling, maintaining, transporting, receiving or delivering.

• Identify and protect against reasonably threats to the security or integrity of the information
• Protect against reasonably anticipated, impermissible uses or disclosures; and
• Ensure compliance by their workforce.

What are the penalties for non-compliance?

Penalties can be apply to: Health Plans, providers, clearinghouses, etc. that don’t follow the require standards. Civil money penalties are $100 per violation, up to $25,000 per person, per year for each requirement or prohibition violated.

Federal criminal penalties: Under HIPAA, Congress also established criminal penalties for knowingly violating patient privacy. Criminal penalties are up to $50,000 and one year in prison for obtaining or disclosing protected health information; up to $100,000 and up to five years in prison for obtaining protected health information under “false pretenses”; and up to $250,000 and up to 10 years in prison for obtaining or disclosing protected health information with the intent to sell, transfer or use it for commercial advantage, personal gain or malicious harm.