Impacts all health care providers and health care plans that transmit health care information in electronic form The provider can be liable for both civil and criminal penalties of up to $250,000 if found guilty of violations.