§1320d–6 Wrongful disclosure of individually identifiable health information

Summary

Makes it a crime for someone who knowingly breaks the rules to use a unique health ID, get a person’s private health information, or share that private health information with someone else. Unique health identifier means a special ID used for health records. Individually identifiable health information means health details that can be tied to a specific person. Penalties depend on how serious it is. For a basic offense the person can be fined up to $50,000, imprisoned up to 1 year, or both. If done under false pretenses the penalty is a fine up to $100,000, imprisonment up to 5 years, or both. If done to sell, transfer, or use the information for commercial gain, personal profit, or to harm someone the penalty is a fine up to $250,000, imprisonment up to 10 years, or both.