This rule is a no-win for researchers. The Federal Medical Privacy Rule, commonly known as the “HIPAA Privacy Rule,” prevents the medical research and clinical community from disclosing the identity of their research subjects. If researchers or clinicians break these rules, they could face serious criminal charges. The minimum fine for willful violations of HIPAA rules is $50,000. The maximum criminal penalty for a HIPAA violation by an individual is $250,000. Restitution may also need to be paid to the victims. In addition to the financial penalty, a jail term is likely for a criminal violation of HIPAA rules. On the other hand, if scientists respect the privacy of their subjects and abide by the HIPAA rules, then their research cannot be used by the EPA. Catch-22.