The minimum penalty for a HIPAA violation, specifically for violations where the covered entity or individual did not know (and by exercising reasonable diligence would not have known) of the violation, starts at $100 per violation, with an annual maximum of $25,000 for repeat violations.