Have there been any civil or criminal HIPAA penalties imposed?

Yes. Fines and penalties against covered entities and/or their employees have been awarded in amounts ranging from $20,000 to $4.3 million.

Physicians and other employees have received jail time ranging from 4 months to 10 years.