Skip to Main Content

HHS Announces Increases to Civil Monetary Penalties for MSP, HIPAA, and SBC Violations

Wednesday, November 24, 2021
HHS Announces Increases to Civil Monetary Penalties for MSP, HIPAA, and SBC Violations
Print

The United States Department of Health and Human Services (HHS) has increased the following key penalties affecting group health plans effective November 15, 2021:

  • Medicare Secondary Payer (MSP): Offering Medicare beneficiaries financial or other benefits as incentives not to enroll in or to terminate enrollment in a group health plan that would otherwise be primary to Medicare will now cause penalties of up to $9,753.
  • HIPAA privacy and security rules: Penalties for a covered entity or business associate violating the Health Insurance Portability and Accountability Act’s (HIPAA) privacy and security rules will depend on the type of violation involved. Penalties are broken down into “tiers” that reflect increasing levels of knowledge about the violation. Each tier carries a minimum and maximum penalty with an annual cap, all of which have increased as follows:
    • Tier one: Minimum penalty $120, maximum penalty $60,226, annual cap $1,806,757
    • Tier two: Minimum penalty $1,205, maximum penalty $60,226, annual cap $1,806,757
    • Tier three: Minimum penalty $12,045, maximum penalty $60,226, annual cap $1,806,757
    • Tier four: Minimum penalty $60,226, maximum penalty and annual cap $1,806,757
  • Summary of Benefits and Coverage (SBC): Failure to provide group health plan participants and beneficiaries with an SBC may now result in a penalty of up to $1,190 per participant or beneficiary.

Employers should become familiar with the new penalty amounts and review their benefit plan administration protocols to ensure full compliance.

Important Dates

  • November15, 2021 – The adjusted penalty amounts apply to SBC, MSP and HIPAA privacy and security violations assessed on or after this date.
  • November 15, 2015 – The adjusted penalty amounts apply if the SBC, MSP and HIPAA privacy and security violations occurred on or after this date.

 

Material posted on this website is for informational purposes only and does not constitute a legal opinion or medical advice. Contact your legal representative or medical professional for information specific to your legal or medical needs.

Get Started

Let Your Aspirations Set the Agenda

Grow with who you know. Reach out to us today and start the conversation, so you’re better protected and prepared for what comes next.

Talk to an Advisor

man looking left