Key Takeaways A HIPAA violation occurs when a covered entity or business associate fails to comply with any provision of the HIPAA Privacy, Security, or Breach Notification Rules. Civil penalties range from $145 to $2,190,294 per violation (adjusted for inflation), with the highest tier carrying an annual maximum of $2,190,294 per violation category; criminal penalties […]