Since we have all decided Delaney committed a HIPAA violation, what should be the resultant penalty for her? According to the HIPAA Journal $($n$.$d$.),$ this is up to the organization and can vary from employer to employer. Generally, termination of the employee is reserved for severe offenses that are purposeful, while violations such as that above are usually as simple as a verbal or written warning. Additional training may also be considered.