Reference Source

Penalty for each February 18, 2009 or later violation of a HIPAA administrative simplification provision in which it is established that the violation was due to reasonable cause and not to willful neglect

For Penalty for each February 18, 2009 or later violation of a HIPAA administrative simplification provision in which it is established that the violation was due to reasonable cause and not to willful neglect, agency is HHS; maximum penalty is 73,011; minimum penalty is 1,461; annual cap is 2,190,294, recorded from its source on 2026-08-10.

Agency
HHS our reading
Violation
Penalty for each February 18, 2009 or later violation of a HIPAA administrative simplification provision in which it is established that the violation was due to reasonable cause and not to willful neglect verified
Maximum penalty
73,011 verified
Minimum penalty
1,461 verified
Annual cap
2,190,294 verified
Sourceecfr.gov
Verified
Review by
DatasetFederal civil penalty maximums — current inflation-adjusted amounts across agencies

Values marked our reading are our classification of what the source says — the source does not print them in those words. The quote below is the evidence for each one; judge it yourself.

What the source says

| <https://www.ecfr.gov/current/title-45/section-160.404#p-160.404(b)(2)(ii)(A)> 45 CFR 160.404(b)(2)(ii)(A) , <https://www.ecfr.gov/current/title-45/section-160.404#p-160.404(B)> (B) | OCR | Penalty for each February 18, 2009 or later violation of a HIPAA administrative simplification provision in which it is established that the violation was due to reasonable cause and not to willful neglect | 2024 | | | | | | Minimum | 2024 | 1,424 | 1,461 | | | | Maximum | 2024 | 71,162 | 73,011 | | | | Calendar Year Cap | 2024 | 2,134,831 | 2,190,294

ecfr.gov, retrieved 2026-08-10

Source

Last verified against source: . Due for re-check by . This page as Markdown · OKF bundle · full dataset as JSON.