Answer:
They face both criminal and civil penalties.
Step-by-step explanation:
The Health Insurance Portability and Accountability Act (HIPAA) is a federal law valid throughout the United States. This law states that all hospitals are required to protect the confidential health information of their clients. That is, hospitals, clinics and all medical staff are strictly prohibited from disclosing information about the health of patients. Breach of this law will subject the violator to criminal and civil penalties.