Penalties for not complying with HIPAA can range from $100 to $50,000 per violation, with a maximum penalty of $1.5 million per year for each violation. The exact penalties depend on the nature of the violation and the level of negligence involved.