What does IIHI stand for?

Attorney brought criminal charges for a misdemeanor violation of HIPAA's prohibition of "knowingly" obtaining individually identifiable health information in violation of HIPAA.

This statement is based on GAO's preliminary work on "seamless transition" and focuses on (1) the policies and outreach efforts that VA has instituted to provide timely access to health care to OIF and OEF servicemembers and (2) the extent to which individually identifiable health information is shared systematically between DOD and VA.

The Health Information Portability and Accountability Act (HIPAA) applies to all health plans, healthcare providers, prescription drug card sponsors, and others who handle individually identifiable health information.

HIPAA requires organizations and individuals to protect a subset of individually identifiable health information, known as protected health information, or PHI, that is held or maintained by covered entities or their business associates acting for the covered entity.

or use individually identifiable health information for commercial advantage, personal gain, or malicious harm, fines of not more than $250,000, or prison sentences of not more than 10 years, or both are applicable

HIPAA calls for severe civil and criminal penalties for noncompliance including fines up to $25,000 for multiple violations of the same standard in a calendar year and fines up to $250,000 and imprisonment up to 10 years for knowing misuse of individually identifiable health information.