HIPAA Fines

Well, 

The good news is, there's a cap on how much you can be fined by HHS for a data breach. The bad news is, it's $1.5 million. Also, that only their fine. You'll also likely be sued and could very well lose your business...

https://www.crowell.com/NewsEvents/All/HIPAA-Final-Rule-Expands-Liability-for-Violations-Clarifies-Penalty-Assessment-Methodology