If the OCR determines that your organization violated HIPAA, how much of a fine could you anticipate? It depends. The truth is that both civil and criminal penalties may involve monetary fines. Depending on the level of the breach, the monetary fines vary. Let’s break these down.