--- title: HIPAA And The Cost Of Non-Compliance description: If you are a healthcare provider or manage a medical facility of any size you are probably familiar with HIPAA Privacy Rules. You may also be familiar with the consequences of non-compliance. Here's an overview of HIPAA policies and procedures and how you avoid fines. image: https://alura.valeonetworks.com/hubfs/Blog%20Images/Imported_Blog_Media/1061.jpeg --- [Skip to the main content.](https://alura.valeonetworks.com/blog/hipaa-and-the-cost-of-non-compliance#main-content) [![SN by VN (500 x 250 px)](https://alura.valeonetworks.com/hs-fs/hubfs/SN%20by%20VN%20(500%20x%20250%20px).png?width=500&height=175&name=SN%20by%20VN%20(500%20x%20250%20px).png "SN by VN (500 x 250 px)")](https://alura.valeonetworks.com) [![SN by VN (500 x 250 px)](https://alura.valeonetworks.com/hs-fs/hubfs/SN%20by%20VN%20(500%20x%20250%20px).png?width=500&height=175&name=SN%20by%20VN%20(500%20x%20250%20px).png "SN by VN (500 x 250 px)")](https://alura.valeonetworks.com) - [Our Services](https://www.valeonetworks.com/our-services/) - [Managed IT](https://www.valeonetworks.com/our-services/managed-it/) - [24/7 Helpdesk](https://www.valeonetworks.com/our-services/managed-it/24-7-helpdesk/) - [24/7 Network Monitoring](https://www.valeonetworks.com/our-services/managed-it/24-7-network-monitoring/) - [Backup & Disaster Recovery](https://www.valeonetworks.com/our-services/managed-it/backup-disaster-recovery/) - [IT Consulting](https://www.valeonetworks.com/our-services/managed-it/it-consulting/) - [Technology Business Reviews](https://www.valeonetworks.com/our-services/managed-it/technology-business-reviews/) - [Vendor Management](https://www.valeonetworks.com/our-services/managed-it/vendor-management/) - [Server Virtualization](https://www.valeonetworks.com/our-services/managed-it/server-virtualization/) - [Wi-Fi Management](https://www.valeonetworks.com/our-services/managed-it/wi-fi-management/) - [Cybersecurity](https://www.valeonetworks.com/our-services/cybersecurity/) - [Antivirus/Malware](https://www.valeonetworks.com/our-services/cybersecurity/antivirus-malware/) - [Network Security](https://www.valeonetworks.com/our-services/cybersecurity/network-security/) - [Vulnerability Testing](https://www.valeonetworks.com/our-services/cybersecurity/vulnerability-testing/) - [Penetration Testing](https://www.valeonetworks.com/our-services/cybersecurity/penetration-testing/) - [Cloud Solutions](https://www.valeonetworks.com/our-services/cloud-solutions/) - [Hosted Private Cloud](https://www.valeonetworks.com/our-services/cloud-solutions/hosted-private-cloud/) - [Hybrid Cloud](https://www.valeonetworks.com/our-services/cloud-solutions/hybrid-cloud/) - [Public Cloud Vendors](https://www.valeonetworks.com/our-services/cloud-solutions/public-cloud-vendors/) - [Office 365 Migration](https://www.valeonetworks.com/our-services/cloud-solutions/office-365-migration/) - [Hosted VOIP Solutions](https://www.valeonetworks.com/our-services/cloud-solutions/hosted-voip-solutions/) - [Industries](https://www.valeonetworks.com/industries/) - [Resources](https://www.valeonetworks.com/resources/) - [In The News](https://valeonetworks.com/in-the-news/) - [Blog](https://blog.valeonetworks.com) - [About](https://www.valeonetworks.com/about/) - [Our Story](https://www.valeonetworks.com/about/our-story/) - [Our Company](https://www.valeonetworks.com/about/our-company/) - [Partners](https://www.valeonetworks.com/about/partners/) - [Areas We Serve](https://www.valeonetworks.com/about/areas-we-serve/) - [Contact](https://www.valeonetworks.com/contact/) -  [215-721-1122](tel:215-721-1122) [Client Portal](https://portal.valeonetworks.com/) Toggle Menu Toggle Menu [215-721-1122](tel:215-721-1122) [Client Portal](https://portal.valeonetworks.com/) - [Our Services *Toggle Menu*](https://www.valeonetworks.com/our-services/) - [Managed IT *Toggle Menu*](https://www.valeonetworks.com/our-services/managed-it/) - [24/7 Helpdesk](https://www.valeonetworks.com/our-services/managed-it/24-7-helpdesk/) - [24/7 Network Monitoring](https://www.valeonetworks.com/our-services/managed-it/24-7-network-monitoring/) - [Backup & Disaster Recovery](https://www.valeonetworks.com/our-services/managed-it/backup-disaster-recovery/) - [IT Consulting](https://www.valeonetworks.com/our-services/managed-it/it-consulting/) - [Technology Business Reviews](https://www.valeonetworks.com/our-services/managed-it/technology-business-reviews/) - [Vendor Management](https://www.valeonetworks.com/our-services/managed-it/vendor-management/) - [Server Virtualization](https://www.valeonetworks.com/our-services/managed-it/server-virtualization/) - [Wi-Fi Management](https://www.valeonetworks.com/our-services/managed-it/wi-fi-management/) - [Cybersecurity *Toggle Menu*](https://www.valeonetworks.com/our-services/cybersecurity/) - [Antivirus/Malware](https://www.valeonetworks.com/our-services/cybersecurity/antivirus-malware/) - [Network Security](https://www.valeonetworks.com/our-services/cybersecurity/network-security/) - [Vulnerability Testing](https://www.valeonetworks.com/our-services/cybersecurity/vulnerability-testing/) - [Penetration Testing](https://www.valeonetworks.com/our-services/cybersecurity/penetration-testing/) - [Cloud Solutions *Toggle Menu*](https://www.valeonetworks.com/our-services/cloud-solutions/) - [Hosted Private Cloud](https://www.valeonetworks.com/our-services/cloud-solutions/hosted-private-cloud/) - [Hybrid Cloud](https://www.valeonetworks.com/our-services/cloud-solutions/hybrid-cloud/) - [Public Cloud Vendors](https://www.valeonetworks.com/our-services/cloud-solutions/public-cloud-vendors/) - [Office 365 Migration](https://www.valeonetworks.com/our-services/cloud-solutions/office-365-migration/) - [Hosted VOIP Solutions](https://www.valeonetworks.com/our-services/cloud-solutions/hosted-voip-solutions/) - [Industries](https://www.valeonetworks.com/industries/) - [Resources *Toggle Menu*](https://www.valeonetworks.com/resources/) - [In The News](https://valeonetworks.com/in-the-news/) - [Blog](https://blog.valeonetworks.com) - [About *Toggle Menu*](https://www.valeonetworks.com/about/) - [Our Story](https://www.valeonetworks.com/about/our-story/) - [Our Company](https://www.valeonetworks.com/about/our-company/) - [Partners](https://www.valeonetworks.com/about/partners/) - [Areas We Serve](https://www.valeonetworks.com/about/areas-we-serve/) - [Contact](https://www.valeonetworks.com/contact/) -  2 min read # HIPAA And The Cost Of Non-Compliance [Mindy Gallagher](https://alura.valeonetworks.com/blog/author/mindy-gallagher) : Jan 20, 2020, 12:00:00 AM [Managed IT Services](https://alura.valeonetworks.com/blog/tag/managed-it-services) If you are a healthcare provider or manage a medical facility of any size you are probably familiar with HIPAA Privacy Rules. You may also be familiar with the consequences of non-compliance. In fact HIPAA fines added up to [$28.7 million](https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/2018enforcement/index.html) in 2018 alone. So what are the basic HIPAA policies and procedures and how you avoid fines? We provide an overview to help with your [HIPAA compliance management](https://www.alura.com/service/compliancy-management). ## **What is HIPAA Compliance?** HIPAA stands for **[Health Insurance Portability and Accountability Act](https://www.hhs.gov/hipaa/for-professionals/privacy/laws-regulations/index.html). **The goal of HIPAA is to shield the Protected Health Information (PHI). Along with hard copy records healthcare providers must also apply with [**HIPAA Security Rules** ](https://www.hhs.gov/hipaa/for-professionals/security/index.html)regarding digital health records (ePHI) which are stored on servers or transferred via inter-office/network systems emails or through a website. ## **Who Must Be HIPAA Compliant?** HIPAA rules apply to all medical facilities and providers. An updated HIPAA Omnibus Rule was added to address changes in the way healthcare services are now delivered. The Omnibus Rule includes Business Associates and secondary individuals/businesses that store or transmit medical records. - **Healthcare providers** – Hospitals doctors clinics psychologists dentists chiropractors nursing homes pharmacies & health plans - **Health insurance companies** – HMOs company health plans & government health plans - **Health Care Clearinghouses** (Business Associates) – Companies that process healthcare data from one entity to another The rules also apply to businesses that supply services to medical facilities such as subcontractors consultants storage companies accountants lawyers administrators IT personnel and anyone who might have access to PHI or ePHI. ## **What is Protected Health Information?** As we mentioned the “Privacy Rule” is designed to protect individually identifying health information or PHI.  **PHI includes:** - Names - Birth death or treatment dates - Contact information - Social Security numbers - Medical record numbers - Photographs - Finger or voiceprints - Other unique identifiers - Past present and future medical records The only exclusion applies to employee health records that a covered entity maintains. ## **What Are HIPAA Policies and Procedures?** There are three aspects to the HIPAA Security Rules. **Technical safeguards:** - Implement access control - Create protocols for authenticating ePHI - Implement encryption and decryption protocols - Create activity logs & audit controls - Facilitate automatic login/logoff controls **Physical safeguards:** - Implement access controls - Establish policies for the use of workstations - Establish policies for mobile devices - Inventory of hardware **Administrative safeguards:** - Conduct risk assessments - Create risk management policies - Provide employee training - Develop & test contingency plans - Restrict third-party access - Guidelines for reporting incidents  In all cases you must obtain written permission from patients in order to share private health information. ## **Penalties for Non-Compliance** Non-compliance is a serious business. Let any area slip and you could face fines and possible legal action. Ignorance of the law will not count as an excuse either. **HIPAA fines and penalties:** - Violation related to ignorance = $100 - $50000 - Violation despite reasonable vigilance = $1000 - $50000 - Violation due to willful neglect = $10000 - $50000 - Violation due to willful neglect where there is no correction within 30 days = $50000 Fines are imposed per violation category and are based on the number of records that were exposed the risk related to the exposure and the level of negligence. ## **Compliance Solutions For Businesses** Keeping track of HIPAA policies and procedures can be difficult for many entities. Compliance doesn’t stop with HIPAA rules either. There are many laws and regulations to meet from employment laws and safety measures to tax filings. The consequences of non-compliance can be steep. You don’t have to face these issues alone however. Alura can help with a range of [compliance management services](https://www.alura.com/blog/why-compliance-management-is-so-important-for-your-business.php). Be sure to also read our blog for additional resources and information that is critical to your operations.  - [Tweet](https://twitter.com/share) #### ![BusinessOwnerGuidetoM&A-1](https://alura.valeonetworks.com/hs-fs/hubfs/BusinessOwnerGuidetoM%26A-1.png?width=303&height=209&name=BusinessOwnerGuidetoM%26A-1.png) #### Download our eBook*THE ULTIMATE ROADMAP TO CMMC COMPLIANCE* by filling out the form below! [![HIPAA Compliance for 2021: 4 Things You Need to Know](https://alura.valeonetworks.com/hubfs/Blog%20Images/Imported_Blog_Media/1069.jpg)](https://alura.valeonetworks.com/blog/hipaa-compliance-for-2021-4-things-you-need-to-know) #### [HIPAA Compliance for 2021: 4 Things You Need to Know](https://alura.valeonetworks.com/blog/hipaa-compliance-for-2021-4-things-you-need-to-know) [Mindy Gallagher](https://alura.valeonetworks.com/blog/author/mindy-gallagher) : Feb 8, 2021, 12:00:00 AM Back in 2018 Anthem paid a HIPAA compliance fine of a staggering $16-million setting a new bar for the highest ever non-compliance fine. [Managed IT Services](https://alura.valeonetworks.com/blog/tag/managed-it-services) [Read More](https://alura.valeonetworks.com/blog/hipaa-compliance-for-2021-4-things-you-need-to-know) [![How to Avoid Healthcare Data Breaches With Data Encryption](https://alura.valeonetworks.com/hubfs/Blog%20Images/Imported_Blog_Media/1093.jpg)](https://alura.valeonetworks.com/blog/how-to-avoid-healthcare-data-breaches-with-data-encryption) #### [How to Avoid Healthcare Data Breaches With Data Encryption](https://alura.valeonetworks.com/blog/how-to-avoid-healthcare-data-breaches-with-data-encryption) [Mindy Gallagher](https://alura.valeonetworks.com/blog/author/mindy-gallagher) : Aug 9, 2021, 12:00:00 AM Reported in 2020 over 81% of the American population had data exposed through a healthcare data breach. If that number disturbs you it should. [Managed IT Services](https://alura.valeonetworks.com/blog/tag/managed-it-services) [Read More](https://alura.valeonetworks.com/blog/how-to-avoid-healthcare-data-breaches-with-data-encryption) [![5 Important Cybersecurity Tips For Your Small Business](https://alura.valeonetworks.com/hubfs/Blog%20Images/Imported_Blog_Media/1104.jpg)](https://alura.valeonetworks.com/blog/5-important-cybersecurity-tips-for-your-small-business) #### [5 Important Cybersecurity Tips For Your Small Business](https://alura.valeonetworks.com/blog/5-important-cybersecurity-tips-for-your-small-business) [Mindy Gallagher](https://alura.valeonetworks.com/blog/author/mindy-gallagher) : Nov 1, 2021, 12:00:00 AM Small business owners have a lot of responsibilities. Often cybersecurity falls by the wayside if the business isn't tech-oriented. [Cybersecurity](https://alura.valeonetworks.com/blog/tag/cybersecurity) [Managed IT Services](https://alura.valeonetworks.com/blog/tag/managed-it-services) [Read More](https://alura.valeonetworks.com/blog/5-important-cybersecurity-tips-for-your-small-business) ![ALL-ALURA_A Valeo Networks_Horizontal-white text](https://alura.valeonetworks.com/hs-fs/hubfs/ALL-ALURA_A%20Valeo%20Networks_Horizontal-white%20text.png?width=1695&height=401&name=ALL-ALURA_A%20Valeo%20Networks_Horizontal-white%20text.png)   ##### About About With cutting-edge technology and quality customer service, you’ll find everything you need to help your company soar with Alura. ##### Explore Alura Explore Alura - [Our Services](https://alura.valeonetworks.com/our-services) - [Industries](https://alura.valeonetworks.com/industries/) - [Resources](https://alura.valeonetworks.com/resources/) - [About](https://alura.valeonetworks.com/about/) - [Contact](https://alura.valeonetworks.com/contact/) ##### Contact Contact [200 Barr Harbor Dr
Suite](https://www.google.com/maps/place/Alura+Business+Solutions/@40.128931,-75.298774,17z/data=!4m15!1m8!3m7!1s0x89c6bdadb8d4e4f7:0x83d390b49b5df01b!2s1000+Germantown+Pike+Ste+C4,+Plymouth+Meeting,+PA+19462!3b1!8m2!3d40.128931!4d-75.298774!16s%2Fg%2F11txj0w8kj!3m5!1s0x89c6bdadbc297c5f:0x2dce076bc30a9418!8m2!3d40.1288817!4d-75.2985614!16s%2Fg%2F1tcv2djr?entry=ttu) [400](https://www.google.com/maps/place/Alura+Business+Solutions/@40.128931,-75.298774,17z/data=!4m15!1m8!3m7!1s0x89c6bdadb8d4e4f7:0x83d390b49b5df01b!2s1000+Germantown+Pike+Ste+C4,+Plymouth+Meeting,+PA+19462!3b1!8m2!3d40.128931!4d-75.298774!16s%2Fg%2F11txj0w8kj!3m5!1s0x89c6bdadbc297c5f:0x2dce076bc30a9418!8m2!3d40.1288817!4d-75.2985614!16s%2Fg%2F1tcv2djr?entry=ttu)[Conshohocken, PA 19428](https://www.google.com/maps/place/Alura+Business+Solutions/@40.128931,-75.298774,17z/data=!4m15!1m8!3m7!1s0x89c6bdadb8d4e4f7:0x83d390b49b5df01b!2s1000+Germantown+Pike+Ste+C4,+Plymouth+Meeting,+PA+19462!3b1!8m2!3d40.128931!4d-75.298774!16s%2Fg%2F11txj0w8kj!3m5!1s0x89c6bdadbc297c5f:0x2dce076bc30a9418!8m2!3d40.1288817!4d-75.2985614!16s%2Fg%2F1tcv2djr?entry=ttu) [215-721-1122](tel:215-721-1122) Business Hours: M-F: 8AM-9PM - [Privacy Policy](https://alura.valeonetworks.com/privacy-policy/) © 2026 Alura [*Facebook*](https://www.facebook.com/alurasolutions/)[*Twitter*](https://twitter.com/AluraSolutions)[*LinkedIn*](https://www.linkedin.com/company/alura-business-solutions/) [![Alura White logo](https://alura.valeonetworks.com/hs-fs/hubfs/VN%20-%20Division%20Logos/Alura%20White%20logo.png?width=295&height=115&name=Alura%20White%20logo.png)](https://alura.valeonetworks.com/) [![Next.I.T._White-Logo](https://alura.valeonetworks.com/hs-fs/hubfs/Next.I.T._White-Logo.png?width=328&height=136&name=Next.I.T._White-Logo.png)](https://next-it.net/) [![White-OTT-Logo-1-768x253](https://alura.valeonetworks.com/hs-fs/hubfs/White-OTT-Logo-1-768x253.png?width=313&height=103&name=White-OTT-Logo-1-768x253.png)](https://www.ontimetech.com/) [![Valeo-Logo-White (1)](https://alura.valeonetworks.com/hs-fs/hubfs/Valeo-Logo-White%20(1).png?width=288&height=123&name=Valeo-Logo-White%20(1).png)](https://valeonetworks.com/) *Return to Top* ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Mindy Gallagher", "url" : "https://alura.valeonetworks.com/blog/author/mindy-gallagher" }, "dateModified" : "2023-09-27T13:12:25.779Z", "datePublished" : "2020-01-20T05:00:00.000Z", "headline" : "HIPAA And The Cost Of Non-Compliance", "image" : [ "https://alura.valeonetworks.com/hubfs/Blog%20Images/Imported_Blog_Media/1061.jpeg" ], "mainEntityOfPage" : { "@id" : "https://alura.valeonetworks.com/blog/hipaa-and-the-cost-of-non-compliance", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://alura.valeonetworks.com/hubfs/VN%20-%20Division%20Logos/Alur/ALL-ALURA_A%20Valeo%20Networks_Horizontal-black%20text.png" }, "name" : "Valeo Networks" } } ```