All health care providers have a liability to keep their staff trained and knowledgeable concerning HIPAA compliance. HIPAA guidelines apply to the gathering, classifying, and transferring of all patient information. HIPAA guidelines also cover electronic medical records (EMR) and the International Classification of Diseases uniform diagnostic codes issued by the World Health …show more content…
Criminal penalties range from 50,000 and a 1 year sentence for knowingly accessing or obtaining protected information to 250,000 and up to 10 years in prison for planning to sell, transfer, or use protected health information for harmful intentions, commercial advantage, or personal gain. Civil penalties range from 25,000 to 1.5 million per year. However, some crimes cannot be imposed under the circumstances such as if a healthcare professional unwillingly violated the rule and if it was committed under reasonable circumstances. For example, a nurse and a physician discussing patient information in a crowded elevator is a verbal violation of patient