
Last month, the US Department of Health and Human Services (HHS) announced it would be capping, and in some cases, lowering the fines for HIPAA violations. HHS released a Notification of Enforcement Discretion Regarding HIPAA Civil Money Penalties describing the new tier structure. According to HHS the new structure better reflects a covered entity’s “level of culpability.” Going forward, HHS will now use annual limits based on the four culpability levels of whether an organization has no knowledge, reasonable cause, willfully neglected and corrected, or willfully neglected without correcting HIPAA violations.



