HIPAA Enforcement Rule (45 CFR Part 160 Subparts C, D, E)

The HIPAA Enforcement Rule, codified at 45 CFR Part 160 Subparts C, D, and E, establishes the civil and criminal penalties for violations of the Privacy, Security, and Breach Notification Rules, outlines procedures for investigations and hearings, and defines the authority of the Office for Civil Rights to impose fines and corrective actions. It details the process for reporting violations, the criteria for determining penalty amounts, and the obligations of covered entities and business associates to comply with enforcement actions.