10 – 29. Authority documentation a. Confidentiality of Records (42 USC dd. b. 42 CFR Part 2. c. The HIPAA of 1996 (PL 104 – 91, Section 164). d. Privacy Act of 1974 (5 USC ab 10bb – 30. Penalties The provisions of this section apply to individuals responsible for any patient record and to individuals who have knowledge of the information contained inpatient records. Such records include those maintained in connection with alcohol or other drug abuse education, training, treatment, rehabilitation, or research. The criminal penalties for unauthorized disclosure of information protected by Federal statutes and regulations may include a fine of up to $5,000 for each offense under the Privacy Act and up to a $250,000 fine and 10 years of imprisonment under the HIPAA. Section Vb bAdministrative Actions for Department of the Army civilian employees
