R495-881-5. Sanctions, Retaliation  


Latest version.
  • (1) An employee of a covered entity may be disciplined for failure to comply with the HIPAA requirements found in 45 CFR Part 164, Subpart E. Discipline may include termination and civil or criminal prosecution.

    (2) An employee of a covered entity may not intimidate, threaten, coerce, discriminate against, or take other retaliatory action against any person for exercising any right established by HIPAA or for opposing in good faith any act or practice made unlawful by HIPAA.