The penalty for the late filing of HIPAA forms online is typically determined by the Department of Health and Human Services (HHS). Penalties may range from $100 to $50,000 per violation, with a maximum penalty of $1.5 million per year for all violations of an identical provision.