If a medical office is in violation of Health Insurance Portability and Accountability Act (HIPAA) regulations, they face both penalties. Ostate and local civil and criminal state and civil federal and state​