Who enforces HIPAA Privacy and Security Rules and what penalties may apply for noncompliance?

• A. The U.S. Department of Health and Human Services Office for Civil Rights enforces; civil penalties range from $100 to $50,000 per violation with annual caps; criminal penalties may apply for intentional wrongdoing.
• B. The Federal Trade Commission enforces; fines up to $10,000 per violation.
• C. State health departments enforce; only civil penalties.
• D. Privacy officers enforce; only warnings.

Answer: (A)