Civil monetary penalties under HIPAA are imposed under a tiered system that takes into consideration the degree to which the entity was aware that HIPAA Rules were being violated. We covered this pretty extensively in a previous blog. So, what does it mean when an organization is penalized to this extent? I think we all know the answer here.