"WRONGFUL DISCLOSURE OF INDIVIDUALLY IDENTIFIABLE HEALTH INFORMATION
"SEC. 1177. (a) OFFENSE.--A person who knowingly and in violation of this part--
"(1) uses or causes to be used a unique health identifier;
"(2) obtains individually identifiable health information relating to an individual; or
"(3) discloses individually identifiable health information to another person,
shall be punished as provided in subsection (b).
"(b) PENALTIES.--A person described in subsection (a) shall--
"(1) be fined not more than $50,000, imprisoned not more than 1 year, or both;
"(2) if the offense is committed under false pretenses, be fined not more than $100,000, imprisoned not more than 5 years, or both; and
"(3) if the offense is committed with intent to sell, transfer, or use individually identifiable health information for commercial advantage, personal gain, or malicious harm, be fined not more than $250,000, imprisoned not more than 10 years, or both.
The class discussions today, brought of different aspects of HIPAA which have caused me to feel quite perplexed. I fear that many of my blogs may in fact be in violation of the law. I question at this time what I can and can not share. I question whether I should blog at all about my experience. I pondered today shutting down my blog altogether, but I have really enjoyed it. So I ponder if I should or should not blog. Without the mention of pt cases it is not very interesting. However, I wouldn't want to go to jail for 5 years or pay $100,000 in fines. I will have to ponder this more.