If you think a HIPAA violation won’t land you with a prison term, think again. Though rare in practice, there are criminal provisions under HIPAA — and federal enforcers do prosecute these crimes. Case in point: Former physician Frank Alario with practices in Florida, New Jersey, and New York violated HIPAA when he disclosed individuals’ protected health information to an outside pharmaceutical rep — Keith Ritson — who wasn’t permitted to have that patient data, according to a Department of Justice release. Alario not only allowed Ritson access to his office and medical files, but to “restricted staff ” and patients’ prescription and medication information as well. Furthermore, “Ritson would use patients’ confidential information to fill out prescription forms that Alario would authorize, and then Ritson received commissions on those prescriptions,” DOJ notes. Alario has already been charged with conspiring to violate HIPAA and could get up to one year in prison as well as a $50,000 fine. Sentencing is expected in February 2023.