[A nurse and physician discussing patient information in a crowded elevator is a verbal violation of patient privacy. Faxing personal health information to the wrong number is another example of a privacy breach. Criminal penalties for wrongful disclosure can be as high as $250,000 and up to 10 years in prison. Healthcare workers are educated regularly on HIPAA guidelines. ]
http://shawnawilson.hubpages.com/hub...atient-Privacy

how to report HIPAA violation-
http://www.hhs.gov/ocr/privacy/hipaa...nts/index.html

http://www.ehow.com/how_4464319_repo...violation.html

http://www.ihs.gov/AdminMngrResource...cfm?module=faq