25% off all training courses Offer ends May 29, 2026
View HIPAA Courses
25% off all training courses
View HIPAA Courses
Offer ends May 29, 2026

The HIPAA Journal is the leading provider of HIPAA training, news, regulatory updates, and independent compliance advice.

New York Woman Avoids Jail for Criminal HIPAA Violation

A New York woman has avoided a jail term for a criminal violation of the Health Insurance Portability and Accountability Act (HIPAA), having been sentenced to probation. She must also pay thousands of dollars in restitution.

On March 23, 2023, Tonya D’Agostino, 53, of Farmington, New York, mailed a parcel via USPS Priority Mail to an individual in Medina, New York. The parcel contained documents that included the individually identifiable health information of four individuals – information classed as protected health information under HIPAA. The information was obtained without authorization, and D’Agostino was not authorized to disclose the information to the recipient of the parcel. The information was disclosed in an attempt to obtain a payment of $216,000.

The Federal Bureau of Investigation (FBI) investigated and D’Agostino was arrested and charged for the HIPAA violation. D’Agostino entered a plea agreement where she agreed to plead guilty to a one-count Misdemeanor Information for a violation of Title 42, United States Code Sections 1320d-6(a)(2) and (b)1 – unlawfully obtaining and disclosing individually identifiable health information.

Individuals can face lengthy jail terms for HIPAA violations, substantial fines, and other sanctions. Under the plea agreement, D’Agostino faced a maximum sentence of 1 year in jail, a fine of up to $50,000, plus a mandatory $25 special assessment and supervised release of up to 1 year. At sentencing, Chief U.S. District Judge Elizabeth A. Wolford chose not to impose a custodial sentence and instead sentenced D’Agostino to 1 year of probation and ordered her to pay $13,410.42 in restitution.

Get The FREE
HIPAA Compliance Checklist

Immediate Delivery of Checklist Link To Your Email Address

Please Enter Correct Email Address

Your Privacy Respected

HIPAA Journal Privacy Policy

Author: Steve Alder is the editor-in-chief of The HIPAA Journal. Steve is responsible for editorial policy regarding the topics covered in The HIPAA Journal. He is a specialist on healthcare industry legal and regulatory affairs, and has 10 years of experience writing about HIPAA and other related legal topics. Steve has developed a deep understanding of regulatory issues surrounding the use of information technology in the healthcare industry and has written hundreds of articles on HIPAA-related topics. Steve shapes the editorial policy of The HIPAA Journal, ensuring its comprehensive coverage of critical topics. Steve Alder is considered an authority in the healthcare industry on HIPAA. The HIPAA Journal has evolved into the leading independent authority on HIPAA under Steve’s editorial leadership. Steve manages a team of writers and is responsible for the factual and legal accuracy of all content published on The HIPAA Journal. Steve holds a Bachelor’s of Science degree from the University of Liverpool. You can connect with Steve via LinkedIn or email via stevealder(at)hipaajournal.com

x

Is Your Organization HIPAA Compliant?

Find Out With Our Free HIPAA Compliance Checklist

Get Free Checklist