The U.S. Department of Health and Human Services is implementing tougher penalties for violations of the Health Insurance Portability and Accountability Act.
Civil penalties top out at $1.5 million. Rule for self-funded group health plans allows penalties against covered entity by a business associate acting as agent.