The Health Insurance Portability and Accountability Act (HIPAA) introduced stiff penalties for individuals or entities that violate the rights or privacy of an individual's personal health information. The fines can run into the millions and may even result in jail time.