A health care provider, Cignet, was fined over $4 million for a violation of HIPAA.  Article here.  While the primary experience that most people have with HIPAA is to keep their health care info private from third parties, ironically this fine actually arose from Cignet's failure to disclose requested healthcare documents to the requesting patient.  While HIPAA is over 15 years old, this is the first fine under HIPAA that I am aware of.