Yes, you can be prosecuted for a violation of the Health Insurance Portability and Accountability Act.
The Department of Justice threatened to bring more prosecutions for HIPAA violations two years ago. They were serious.
Last week, the United States Attorney’s Office in Western District of Pennsylvania brought charges against Linda Sue Kalina for illegally obtaining the medical records of more than 100 patients in violation of HIPAA.
Kalina worked as a patient information coordinator at a hospital. In her capacity as a patient information coordinator, Kalina was authorized to access patient health information. However, Kalina was not permitted to obtain the electronic records.
The Indictment states that Kalina references four separate occasions when Kalina disclosed the medical information of three patients.
The Indictment charges six counts. Kalina’s arraignment is pending.