HIPAA Training Handbook for the Behavioral Health Staff ©2002 Opus Communications, a division of HCPro. Unauthorized duplication is prohibited. Criminal penalties for “wrongful disclo-sure” can include not only large fines, but also jail time. The penalties increase as the seriousness of the offense increas-es. In other words, selling PHI ...