public, when in fact he knew that the patient was not such a threat." according to koczkodaj et al., 2018, the total number of individuals affected since october 2009 is 173,398,820. the differences between civil and criminal penalties are summarized in the following table: type of violationcivil penalty (min)civil penalty (max) individual did not know (and by exercising reasonable diligence would not have known) that he/she violated hipaa$100 per violation, with an annual maximum of $25,000 for repeat violations$50,000 per violation, with an annual maximum of $1.5 million hipaa violation due to reasonable cause and not due to willful neglect$1,000 per violation, with an annual maximum of $100,000 for repeat violations$50,000 per violation, with an annual maximum of $1.5 million hipaa violation due to willful neglect but violation is corrected within the required time period$10,000 per violation, with an annual maximum of $250,000 for repeat violations$50,000 per violation, with an annual maximum of $1.5 million hipaa violation is due to willful neglect and is not corrected$50,000 per violation, with an annual maximum of $1,000,000$50,000 per violation, with an annual maximum of $1.5 million type of violationcriminal penalty covered entities and specified individuals who "knowingly" obtain or disclose individually identifiable health informationa fine of up to $50,000 imprisonment up to 1 year offenses committed under false pretensesa fine of up to $100,000 imprisonment up to 5 years offenses committed with the intent to sell, transfer, or use individually identifiable health information for commercial advantage, personal gain or malicious harma fine of up to $250,000 imprisonment up to 10 years legislative information in 1994, president clinton had ambitions to renovate the state of the nation's health care. despite his efforts to revamp the system, he did not receive the support he needed at the time. the congressional quarterly almanac of 1996 explains how two senators, nancy kassebaum (r-ks) and edward kennedy (d-ma) came together and created a bill called the health insurance reform act of 1995 or more commonly known as the kassebaum-kennedy bill. this bill was stalled despite making it out of the senate. undeterred by this, clinton pushed harder for his ambitions and eventually in 1996 after the state of the union address, there was some headway as it resulted in bipartisan cooperation. after much debate and negotiation, there was a shift in momentum once a “compromise between kennedy and ways and means committee chairman bill archer” was accepted after alterations were made of the original kassebaum-kennedy bill. soon after this, the bill was signed into law by president clinton and was named the health insurance portability and accountability act of 1996 (hipaa). pub. l. 104–191 (text) (pdf), 110 stat. 1936 h.r. 3103; h. rept. 104-469, part 1; h. rept. 104-736 s. 1028; s. 1698; s. rept. 104-156 hhs security standards, 45 cfr 160, 45 cfr 162, and 45 cfr 164 hhs standards for privacy of individually identifiable health information, 45 cfr 160 and 45 cfr 164