October 16, 2003: Transaction and Code Sets - expected date of compliance for small health plans and covered entities that filed a compliance plan to delay implementation

July 30, 2004: Standard unique employer identification compliance deadline

April 21, 2005: Security Compliance Deadline


Penalties for not complying with HIPAA

The general penalty for failure to comply is:
• Each violation: $100

• Maximum penalty for a violations of an identical requirement: may not exceed $25,000

Wrongful Disclosure of Individually Identifiable Health Information:

• Wrongful disclosure offense: $50,000, imprisonment of not more than one year, or both.

• Offense under false pretenses: $100,000, imprisonment of not more than 5 years, or both.

• Offense with intent to sell information: $250,000, imprisonment of not more than 10 years, or both.