45 C.F.R. § 150.301 General rule regarding the imposition of civil money penalties.
Title 45 - Public Welfare
If any health insurance issuer that is subject to CMS's enforcement authority under §150.101(b)(2), or any non-Federal governmental plan (or employer that sponsors a non-Federal governmental plan) that is subject to CMS's enforcement authority under §150.101(b)(1), fails to comply with HIPAA requirements, it may be subject to a civil money penalty as described in this subpart.
Title 45: Public Welfare
PART 150—CMS ENFORCEMENT IN GROUP AND INDIVIDUAL INSURANCE MARKETS
Subpart C—CMS Enforcement With Respect to Issuers and Non-Federal Governmental Plans—Civil Money Penalties
§ 150.301 General rule regarding the imposition of civil money penalties.

