How much time in jail can one spend for intentional unauthorized PHI disclosure?

The penalties for intentional unauthorized disclosure of Protected Health Information (PHI) can vary significantly based on the circumstances and severity of the offense. Under the Health Insurance Portability and Accountability Act (HIPAA), individuals found guilty of willful neglect that is not corrected can face up to 3 years in prison. If the disclosure is for personal gain or malicious harm, the maximum sentence can increase to 10 years. Additionally, fines may also be imposed alongside imprisonment.