# Penalty for each pre-February 18, 2009 violation of the HIPAA administrative simplification provisions — Federal civil penalty maximums — current inflation-adjusted amounts across agencies

For Penalty for each pre-February 18, 2009 violation of the HIPAA administrative simplification provisions, agency is HHS; statutory authority is 1320(d)-5(a); maximum penalty is 198; annual cap is 49,848, recorded from its source on 2026-08-10.

- **Agency:** HHS _(our reading, not quoted from the source)_
- **Violation:** Penalty for each pre-February 18, 2009 violation of the HIPAA administrative simplification provisions _(verified: appears in the quote below)_
- **Statutory authority:** 1320(d)-5(a) _(verified: appears in the quote below)_
- **Maximum penalty:** 198 _(verified: appears in the quote below)_
- **Annual cap:** 49,848 _(verified: appears in the quote below)_

## What the source says

> 1320(d)-5(a) | <https://www.ecfr.gov/current/title-45/section-160.404#p-160.404(b)(1)(i)> 45 CFR 160.404(b)(1)(i) , <https://www.ecfr.gov/current/title-45/section-160.404#p-160.404(ii)> (ii) | OCR | Penalty for each pre-February 18, 2009 violation of the HIPAA administrative simplification provisions | 2024 | 193 | 198 | | | OIG | Calendar Year Cap | 2024 | 48,586 | 49,848

## Source

- https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-A/part-102/section-102.3

Last verified: 2026-08-10. Review by: 2027-02-26.
Part of [Federal civil penalty maximums — current inflation-adjusted amounts across agencies](https://referencesource.org/federal-civil-penalty-maximums/).