42 CFR § 480.108 - Penalties for unauthorized disclosure.
---
identifier: "/us/cfr/t42/s480.108"
source: "ecfr"
legal_status: "authoritative_unofficial"
title: "42 CFR § 480.108 - Penalties for unauthorized disclosure."
title_number: 42
title_name: "Public Health"
section_number: "480.108"
section_name: "Penalties for unauthorized disclosure."
chapter_name: "CENTERS FOR MEDICARE & MEDICAID SERVICES, DEPARTMENT OF HEALTH AND HUMAN SERVICES"
subchapter_number: "F"
subchapter_name: "QUALITY IMPROVEMENT ORGANIZATIONS"
part_number: "480"
part_name: "ACQUISITION, PROTECTION, AND DISCLOSURE OF QUALITY IMPROVEMENT ORGANIZATION INFORMATION"
positive_law: false
currency: "2026-03-24"
last_updated: "2026-03-24"
format_version: "1.1.0"
generator: "[email protected]"
authority: "42 U.S.C. 1302 and 1395hh."
cfr_part: "480"
---
# 480.108 Penalties for unauthorized disclosure.
A person who discloses information not authorized under Title XI Part B of the Act or the regulations of this part will, upon conviction, be fined no more than $1,000, or be imprisoned for no more than six months, or both, and will pay the costs of prosecution.