Skip to main content
. Author manuscript; available in PMC: 2019 Oct 7.
Published in final edited form as: Health Matrix Clevel. 2019;29(1):3.

Table 2.

State (code citation) Damage amount
Alaska (Alaska Stat. Ann. § 18.13.020) Actual damages + $5,000 (+ $100,000 if the violator profited from violation)
California (Cal. Civ. Code 56.17) Negligent disclosure, civil penalty not to exceed $1,000 (paid to subject)
Colo. Rev. Stat. Ann. § 10-3-1104.6 & 10–3-1104.7 Greater of actual damages or $10,000 per violation
Illinois (410 Ill Comp. Stat. Ann. 513/1) Greater of $2,500 or actual damages (negligent) OR Greater of $15,000 or actual damages (intentional or reckless)
Louisiana (La. Rev. Stat. Ann. 22:1023) Greater of actual damages or $50,000 (negligent) Greater of actual damages or $100,000 (intentional)
Massachusetts (Mass. Gen. Laws. Ann. Ch. 151B § 4) Actual damages (contract) or special damages not to exceed $1,000
New Hampshire (NH Rev. Stat. Ann. § 141-H:1 et seq) Not less than $1,000 per violation
Oregon (Or. Rev. Stat. Ann. § 192.531 et seq) Violations regarding retention or human subjects requirements (§§ 192.537 & 547) greater of actual damages or: $100 (inadvertent violation) $500 (negligent violation) $10,000 (knowing or reckless violation) $15,000 (knowing violation w/ fraudulent representation) $25,000 (knowing violation with intent to sell, transfer or use for commercial advantage, personal gain or malicious harm) Violations regarding consent or disclosure requirements (§§ 535 and 539) greater of actual damages or: $1,000 (inadvertent violation) $5,000 (negligent violation) $100,000 (knowing or reckless violation) $150,000 (knowing violation w/ fraudulent representation) $250,000 (knowing violation with intent to sell, transfer or use for commercial advantage, personal gain or malicious harm)