If a medical office is in violation of health insurance portability and accountability act (hipaa) regulations, they face both penalties.

They face both criminal and civil penalties.

Explanation:

The Health Insurance Portability and Accountability Act (HIPAA) is a federal law valid throughout the United States. This law states that all hospitals are required to protect the confidential health information of their clients. That is, hospitals, clinics and all medical staff are strictly prohibited from disclosing information about the health of patients. Breach of this law will subject the violator to criminal and civil penalties.