While I think this will result in a miniscule fine by the fed, HIPAA has some of the strictest fines of any US Govt violation and could easily be a multimillion/multibillion dollar fine if it was taken seriously and they wanted to make a statement for healthcare privacy.