As per the federal rule, civil penalties are $100 per violation however; penalties can increase in case of multiple violations taken place to a single individual. Civil penalties can be up to $25,000 per year, per person, per standard. Criminal penalties for violating privacy rule can amount to $250,000 fine and ten years in prison. In case of disclosing patient’s information “knowingly and improperly” or getting information under “false pretenses ” for financial gain or “malicious harm” calls for serious penalties.