Violations under the HIPAA Privacy Rule include Civil Money Penalties which can result in fines ranging from $100 - $1,500,000 or Criminal Penalties which can result in fines up to $250,000 and up to 10 years in prison.