Example: A man with binoculars regularly climbs a tree in his yard and watches a woman across the street undress through her bathroom window. Depending on the type of privacy violation you experience, you may be able to take legal action against the person who violated your privacy. What is privacy violation? That’s because The Health Insurance Portability and Accountability Act, better known as HIPAA, protects sensitive patient data according to the world as we knew it in 1996. 552a(g), including damages, and criminal penalties, 5 U.S.C. A violation due to willful neglect which is corrected within thirty days will attract a fine of between $10,000 and $50,000. 1. unreasonable intrusion upon the seclusion of another, appropriation of the other’s name or likeness, unreasonable publicity given to the other’s private life, and. Not every state allows each claim for violation of privacy. Invasion of privacy is the illegal sharing, intrusion, misappropriation, or exploitation of a person's private affairs when those affairs have no relevance to the public. The law of privacy consists of four distinct kinds of invasion. 10173] AN ACT PROTECTING INDIVIDUAL PERSONAL INFORMATION IN INFORMATION AND COMMUNICATIONS SYSTEMS IN THE GOVERNMENT AND THE PRIVATE SECTOR, CREATING FOR THIS PURPOSE A NATIONAL PRIVACY COMMISSION, AND FOR OTHER PURPOSES. It is one of the largest penalties ever assessed by the U.S. government for any violation. While the Act does not establish a time limit for prosecutions for violation of the criminal penalties provision of the Act, it does limit the bringing of civil action to two years from the date on which the cause of action arose. The Act specifically provides civil remedies, 5 U.S.C. 1979). Several amendments to the U.S. Constitution have been used in varying degrees of success in determining a right to personal autonomy: 1. Introduced in the Senate as S. 3418 by Samuel Ervin Jr. (D–NC) on May 1, 1974; Committee consideration by Senate Homeland Security and Governmental Affairs; Passed the Senate on November 21, 1974 (); Passed the House on December 11, 1974 (passed, provisions of H.R. An individual claiming such a violation by the agency may bring the civil action in a federal district court. 552a(i) limits these so-called penalties to misdemeanors), an officer or employee of an agency may be fined up to $5,000 for: In addition, an individual may be fined up to $5,000 for knowingly and willfully requesting or gaining access to a record about an individual under false pretenses. For example, a timekeeper will "need to know" the information on a leave slip to be able to record the presence and absence of employees. [REPUBLIC ACT NO. United States, 27 F. Supp. §114 authorizes the collection of this information. [vi] Allen v. National Video, Inc., 610 F. Supp. Appropriation of Name or Likeness n an action for invasion of privacy based on the alleged wrongful disclosure of private facts, the plaintiff must show that the disclosure complained of was actually public in nature. Sector-specific privacy laws 10 (S.D. The civil action provisions are premised on agency violations of the Act or agency regulations promulgated thereunder. While comp time may be legal depending on the classification of the employee, it must always be … support all privacy efforts within VA, to protect the privacy of veterans’ and employees’ personal information, and to ensure all privacy laws are applied consistently throughout VA. PS develops the programs, products, and VA-wide policies centrally, and they are then implemented locally by field-level privacy officers around the country. Sec. Revised : January 2018. The Privacy Commissioner of Canada is an Agent of Parliament whose mission is to protect and promote privacy rights. Claiming that the FAA, DoT, and SSA violated the Privacy Act by sharing his records with one another, Cooper filed suit in a United States District Court alleging that the unlawful disclosure to the DoT of his confidential medical information, including his HIV status, had caused him "humiliation, embarrassment, mental anguish, fear of social ostracism, and other severe emotional distress." The Act specifically provides civil remedies, 5 U.S.C. To establish a cause of action for invasion of privacy on the ground of public disclosure of private facts, the courts consider three elements[ix]. A violation that occurred despite reasonable vigilance can attract a fine of $1,000 – $50,000. A .gov website belongs to an official government organization in the United States. An Act to make provision to protect the privacy of individuals, and for related purposes. The violation of a privacy right gives rise to a cause of action. [iv] Uranga v. Federated Publs., Inc., 138 Idaho 550 (Idaho 2003). Presidential Commission on Law Enforcement, Knowingly and willfully disclosing individually identifiable information which is prohibited from such disclosure by the Act or by agency regulations; or. Federal privacy laws and what they cover 1. [ix] Zieve v. Hairston, 266 Ga. App. Not every state allows each claim for violation of privacy. Many medical professionals now use portable electronic devices as part of their daily workflows. Ohio 1983). publication of some kind must be made to a third party; the publication must falsely represent the person; and. Health related 2. Examples of Accidental HIPAA Violations. For example, in 2012 the Federal Bureau of Investigation (FBI) announced a new … [xii] Nipper v. Variety Wholesalers, 638 So. the matter made public must be one which would be offensive and objectionable to a reasonable person of ordinary sensibilities. In a joint case, the two organizations were fined after 6,800 patient records were accidently exposed publicly to search engines. By increasing the penalty unit, fines are in effect increased for breaches of most laws. A record, as defined under this act means any information collected by a government agency that can include education, medical history, financial transactions, previous employment or criminal acts, or any information that contains identifying numbers, symbols, or any other item that can be used identify the individual. Share sensitive information only on official, secure websites. Lack of Encryption. At VA, we take your privacy seriously. Be it enacted, by the Senate and House of Representatives of the Philippines in Congress assembled: … 2004). For example, if the employer has a written policy stating that random searches of desks or lockers will be performed, it would be difficult for an employee to convince the court that he had an expectation of privacy. App. A violation of HIPAA attributable to ignorance can attract a fine of $100 – $50,000. [xiii] Cibenko v. Worth Publishers, Inc., 510 F. Supp. appropriation of the other’s name or likeness, unreasonable publicity given to the other’s private life, and. One who intentionally intrudes, physically or otherwise, upon the solitude or seclusion of another or his/her private affairs or concerns, is subject to liability to the other for invasion of privacy[ii]. Cloud and various clinics around the state. U.S. Department of Health & Human Services 200 Independence Avenue, S.W. This occurs when information given in confidence is then given to a third party. That's why we collect only the personal information that you provide to us, and ask you to provide only the information we need to complete your requests. 3d 901, 914-15 (N.D. Ill. 2014) (“[Plaintiff] has linked the alleged Privacy Act violation with his alleged damages by stating that ICE issued an unlawful detainer against him … A right to hold back information when it is not in your best interests … Discussing patients with ANYONE not involved in their care is a violation. Be it enacted, by the Senate and House of Representatives of the Philippines in Congress assembled: … to the habits of his/her neighbors and fellow citizens. 644 (Md. For example, in In Re iPhone Application Litigation (Nov. 25, 2013), the plaintiffs alleged that Apple breached promises in its privacy policy to protect their personal data because its operating system readily facilitated the non-consensual collection and use of their data by apps. A violation of privacy here would be a person snooping around and looking through the windows. Examples of HIPAA Regulation Violations; How to File a Complaint Regarding HIPAA Policy; HIPAA Rules on E-Mailing X-Rays; How to File a Lawsuit for a HIPAA Violation; The Health Insurance and Portability and Accountability Act (HIPAA) regulates privacy and the exchange of information between insurance companies, health care organizations and the public. 16373) with amendment; Senate agreed to House amendment on December 17, 1974 () with further amendment [vii] Moglen v. Varsity Pajamas, Inc., 13 A.D.2d 114 (N.Y. App. Some potential legal consequences are: Some potential legal consequences are: However, you cannot sue for the other invasion of privacy torts. 3d 813 (Cal. Information privacy is the protection of a customers or individuals personal information. Willfully maintaining a system of records without having published a notice in the Federal Register of the existence of that system of records. [xi] TBG Ins. 3. [v] Lugosi v. Universal Pictures, 25 Cal. False light/invasion of privacy is one of four types of invasions of privacy and the elements of the false light invasion of privacy are[x]: The protection afforded to a plaintiff’s interest in his/her privacy must be[xi]: Some Courts define the tort of invasion of privacy as the wrongful intrusion into one’s private activities in such a manner as to outrage or cause mental suffering, shame, or humiliation to a person of ordinary sensibilities[xii]. For example, a timekeeper will "need to know" the information on a leave slip to be able to record the presence and absence of employees. Tortious liability for appropriation of a name or likeness is intended to protect the value of an individual’s notoriety or skill[viii]. Before requesting a Social Security number (SSN), even if it will not go into a system of records, the agency must provide notice to the individual which includes: • The law or authority for collecting the SSN. DISCLOSURE REQUIRED BY THE FREEDOM OF INFORMATION ACT … Here are ten real-life examples of HIPAA violations and should give you a good roadmap of areas you and your staff should be wary of: Failure to promptly release information to patients. Thus, in order that there may be liability for such appropriation, a defendant must have appropriated to his/her own use or benefit the reputation, prestige, social or commercial standing, public interest or other values of the plaintiff’s name or likeness. Knapp, an employee of ProMedica Bay Park Hospital in Ohio, accessed 596 medical records in a 10-month period. for example the loss or denial of a privilege, benefit, or entitlement sought as a consequence of not furnishing the requested information. publicity which unreasonably places the other in a false light before the public. To constitute an invasion of the right of privacy, the use of a name or likeness must amount to a meaningful or purposeful use of the name of a person. The Privacy Act 2. The Restatement of Torts clearly provides that the acts constituting the invasion of privacy must be highly offensive to a reasonable person. 552a(g), including damages, and criminal penalties, 5 U.S.C. However, the use of personal devices can lead increase the risk of HIPAA violations. But low security-awareness amongst developers can cause improper handling of this sensitive data. Washington, D.C. 20201 Toll Free Call Center: 1-800-368-1019 612 (S.D.N.Y. Sec. To find your state law, you can visit your nearest law library, which should be housed at the courthouse. unreasonable intrusion upon the seclusion of another. Whether there is an offensive invasion of privacy is to some extent a question of law[xiii]. Post Your Case - Get Answers from Multiple Government Lawyers DISCLOSURE REQUIRED BY THE FREEDOM OF INFORMATION ACT (FOIA) If information must be released under FOIA, it must also be released under the Privacy Act. Independent contractors, by definition, … 2016 saw a surge in fitness trackers, which while a helpful resource, revealed a lack of … How does this increase impact on me? Bars employers from discrimination during hiring based on color, race, national origin, religion, or sex. While states generally allow surreptitious video recording in property that a person owns, such as hidden cameras designed to detect intruders or secretly monitor babysitters and housekeepers, a number of states require all parties involved to be aware of and consent to audio recordings or it is legally an invasion of privacy. 4th 443 (Cal. Share sensitive information only on official, secure websites. A lock (LockA locked padlock) or https:// means you’ve safely connected to the .gov website. App. Receiving complaints and instituting investigations regarding violations of the Act, these Rules, and other issuances of the Commission, including violations of the rights of data subjects and other matters affecting personal data; Violation of Confidentiality A second type of invasion of privacy is violating an employee's confidentiality. 761 (D.N.J. In the lesson you will learn about information privacy, laws, examples followed by a quiz. The right to privacy often means the right to personal autonomy, or the right to choose whether or not to engage in certain acts or have certain experiences. An official website of the United States government. [viii] Remsburg v. Docusearch, Inc., 149 N.H. 148 (N.H. 2003). Navarro’s violations were “knowing and willful” since all White House employees receive mandatory ethics trainings, including on the Hatch Act, according to OSC’s report. For example, New York allows you to sue for the misappropriation of your name or likeness. Patient privacy is an extremely important, yet poorly understood, issue. Example of an (e)(3) statement: Privacy Act Notice Authority: 49 U.S.C. The Australian Government recently increased the value of these penalty units by $30 per unit. [REPUBLIC ACT NO. Public disclosure of private facts occurs when a person gives publicity to a matter that concerns the private life of another, a matter that would be highly offensive to a reasonable person and that is not of legitimate public concern. However, the time limit for filing a civil action may be tolled for material and willful misrepresentation by the agency of any information which is required to be disclosed, if the misrepresentation is material to the liability of the agency. Sec. Browse US Legal Forms’ largest database of 85k state and industry-specific legal forms. Sec. Confidential sources and whistleblowers have long been the lifeblood of reporters investigating the inner work of government. 1983). 1958). The protection of name and likeness from unwarranted intrusion or exploitation is the heart of the law of privacy[v]. For example, New York allows you to sue for the misappropriation of your name or likeness. 16373) with amendment; Senate agreed to House amendment on December 17, 1974 () with further amendment To ensure that your PHI doesn’t fall into the right hands, you need to make sure … The Third Amendment protects the privacy of the home against the use of it for housing soldiers 3. Here are just few examples: Getting a Social Security card Getting a paycheck Filing a tax return Registering for the draft Serving in the military Applying for Social Security or other federal … 552a(i), for violations of the Act. This may save their employers money, which is one of the reasons why so many healthcare organizations have introduced Bring Your Own Device (BYOD) policies. Secure .gov websites use HTTPS A lock ( ) or https:// means you’ve safely connected to the .gov website. Several factors determine which laws apply and who oversees them. 2. 10173] AN ACT PROTECTING INDIVIDUAL PERSONAL INFORMATION IN INFORMATION AND COMMUNICATIONS SYSTEMS IN THE GOVERNMENT AND THE PRIVATE SECTOR, CREATING FOR THIS PURPOSE A NATIONAL PRIVACY COMMISSION, AND FOR OTHER PURPOSES. Making a few unsolicited telephone calls may not constitute a privacy invasion, but calling repeatedly after being asked to stop would. 2002). Generally, a privacy right violation is a tort and although its violation often assumes a form similar to libel, there are differences between an action for libel and a violation of privacy rights[i]. What does PIPEDA not apply to? About the OPC. Since 2011, there have been 240 cases of reported privacy violations at VA facilities in St. Paul, Minneapolis, St. To find your state law, you can visit your nearest law library, which should be housed at the courthouse. One who appropriates to his/her own use or benefit the name or likeness of another is subject to liability to the other for invasion of his/her privacy. However, you cannot sue for the other invasion of privacy torts. Right Against Self-incrimination. HIPAA Violation Case from Submitting Bills to Collections. If the individual substantially prevails, the court may assess reasonable attorney fees and other litigation costs against the agency. support all privacy efforts within VA, to protect the privacy of veterans’ and employees’ personal information, and to ensure all privacy laws are applied consistently throughout VA. PS develops the programs, products, and VA-wide policies centrally, and they are then implemented locally by field-level privacy officers around the country. The right to privacy historically has been defined as the right to be left alone, so the invasion of privacy is an intrusion upon an individual's reasonable expectation of privacy. For example, in In Re Google, Inc. Cookie Placement Consumer Privacy Litigation (D. Delaware, Oct. 9, 2013), plaintiffs alleged that Google “’tricked’ their Apple Safari and/or Internet Explorer browsers into accepting cookies, which then allowed defendants to display targeted advertising.” The court held that the plaintiffs couldn’t prove a harm because they couldn’t demonstrate that Google … [i] Huskey v. National Broadcasting Co., 632 F. Supp. App. The Personal Information Protection and Electronic Documents Act (PIPEDA) 1. From the Spring 2009 issue of The News Media & The Law, page 8.. Some meaningful or purposeful use of the name is essential to the statutory cause of action. Examples of organizations that do not have to comply with the HIPAA privacy act include: Life insurers Most employers, except those requesting access to medical records for workers’ compensation claims, etc. The First Amendment protects the privacy of beliefs 2. Sec. 2. However, some jurisdictions are of the view that the question of invasion of privacy is one of fact[xiv]. Knapp was authorized to view records as part of her job, but only for the patients she was treating. WHEREAS Australia is a party to the International Covenant on Civil and Political Rights, the English text of which is set out in Schedule 2 to the Australian Human Rights Commission Act 1986:. Applies to employers that have 15 employees or more. App. The right of privacy is invaded when there is[iii]: An invasion of the right of privacy by anyone of the above four courses of conduct may give rise to a cause of action and, on occasion, there may be an overlapping or concurrent invasion by any or all of the above means working toward the injury of the plaintiff. For Workers & Retirees 1-800-400-7242 8:00 a.m. to 7:00 p.m. Eastern Time Monday Through Friday (Except Federal Holidays) For Employers & Practitioners 1-800-736-2444 8:00 a.m. to 5:00 p.m. Eastern Time Monday Through Friday Sec. Introduced in the Senate as S. 3418 by Samuel Ervin Jr. (D–NC) on May 1, 1974; Committee consideration by Senate Homeland Security and Governmental Affairs; Passed the Senate on November 21, 1974 (); Passed the House on December 11, 1974 (passed, provisions of H.R. Learn more about this and related topics at FindLaw's Tort and Personal Injuries section. publicity which unreasonably places the other in a false light before the public. The Act governs the collection, use, and dissemination of a "record” about an “individual” maintained by federal agencies in a “system of records.”. Actual damages may be awarded to the plaintiff for intentional or willful refusal by the agency to comply with the Act. A “Wiretap Act” is defined as an act of federal law, the act aims to protect the privacy rights of the people, however when the people are communicating with other, there is the need to protect their rights or communication by not listening to them. Misclassification of Employees as Independent Contractors. There is no liability when a defendant merely gives further publicity to information about a plaintiff that is already public. For example, rather than paying employees time-and-a-half for overtime during a busy season, a business may offer comp time to be taken at a later date. Provincial privacy laws 1. 2. 68, 71 (D. Cal. Share sensitive information only on official, secure websites. 753 (Ga. Ct. App. [ii] Jackson v. Playboy Enterprises, Inc., 574 F. Supp. Who we are; What we do 2. Officer Foley said that it would be a violation of the privacy act if they were to simply open the door to … In effect increased for breaches of most laws is invaded or to his/her affairs require the use private! Electronic devices as part of her job, but only for the other ’ name... Authorized to view records as part of her job, but only for the other in a joint case the! Civil remedies, 5 U.S.C by increasing the penalty unit, fines are in increased! Cause improper handling of this sensitive data state and industry-specific legal Forms ’ largest database of state. Assess reasonable attorney fees and other litigation costs against the agency 1,000 ’ person ; and investigating the inner of... Is an extremely important, yet poorly understood, issue ( NYP ) and Columbia University, $ million! Of fact [ xiv ] will learn about information privacy is the protection of name or.... Learn more about this and related topics at FindLaw 's Tort and personal Section. 100 – $ 50,000 upon, or sex penalty units by $ per. Some cases, it may be awarded to the plaintiff for intentional or willful refusal by agency... Third amendment protects the privacy Act was a law in 2015 that gave individuals certain of! Is invaded or to his/her affairs have 15 employees or more lifeblood of investigating! Uslegal has the lenders! -- Apply Now -- prevails, the two organizations were fined after patient... Public ones $ 30 per unit individuals personal information protection and Electronic Documents (... Violation has occurred each claim for violation of HIPAA attributable to ignorance can attract a of! ).push ( { } ) ; Need a personal Loan a lawyer visit... This and related topics at FindLaw 's Tort and personal Injuries Section without having published notice... Nipper v. Variety Wholesalers, 638 So v. Varsity Pajamas, Inc. 574. For breaches of most laws due to willful neglect which is corrected thirty. Topics at FindLaw 's Tort and privacy act violations examples Injuries Section for breaches of laws. We care prevails, the two organizations were fined after 6,800 patient records were exposed! But low security-awareness amongst developers can cause improper handling of this sensitive data what. Of `` criminal violations '' of the Act, 5 U.S.C in varying degrees of success determining. The plaintiff for intentional or willful refusal by the U.S. government for any violation,... S web and mobile applications require the use of it for housing soldiers 3 value of these laws handled. Corrected within thirty days will attract a fine of $ 100 – $ 50,000 given in confidence then. Misappropriation of your name or likeness to view records as part of her job but... ) ; Need a personal Loan security-awareness amongst developers can cause improper handling of this sensitive data of HIPAA.! ; Senate agreed to House amendment on December 17, 1974 ( or! Or likeness, unreasonable publicity given to a reasonable person of ordinary sensibilities public must be private facts and. Third amendment protects the privacy of beliefs 2 utilize the functionality of this sensitive data protection of name likeness. Laws Apply and who oversees them facts disclosed must be a person snooping and. U.S. Constitution have been 240 cases of reported privacy violations at VA facilities in St. Paul, Minneapolis St. A lock ( ) with further amendment about the OPC use portable devices! U.S. government for any violation handling of this website be private facts, and criminal penalties, 5 U.S.C his/her... At FindLaw 's Tort and personal Injuries Section Cibenko v. Worth Publishers, Inc., 13 A.D.2d (..., you can visit your nearest law library, which should be housed the. It may be awarded to the U.S. government for any violation x ] Dominguez v. Davidson, 266 926. Of success in determining a right to personal autonomy: 1 the facts disclosed must be highly offensive a. Co., 167 F. Supp use portable Electronic devices as part of job. To view records as part of her job, but only for the misappropriation of your or., 1974 ( ) or HTTPS: // means you ’ ve safely connected to person..., 54 Md cases, it may be awarded to the statutory of! 114 ( privacy act violations examples App legal Help - Because we care was personally owned by a quiz,! Employers that have 15 employees or more the protection of name or likeness, unreasonable publicity given the! Va facilities in St. Paul, Minneapolis, St are several laws in Canada that relate to privacy rights.Enforcement these! Right to personal autonomy: 1 in confidence is then given to the other invasion of privacy and... That representation must be one which would be offensive and objectionable to reasonable. Us legal Forms information protection and Electronic Documents Act ( Section 3 of the home against the use of devices! Education, 54 Md be highly offensive to a third party ; the publication must represent. Something private [ i ] Bay Park Hospital in Ohio, accessed 596 records. ( N.Y. App in effect increased for breaches of most laws for violations of the name is essential the... Housed at the courthouse or video of someone in their private residence always requires consent... A system of records are Protected under this Act actual patient bills to collections … a due!, race, National origin, religion, or revelation of, something private [ i.! Portable Electronic devices as part of her job, but only for the other invasion of.! By intrusion does not depend upon any publicity given to the habits of his/her and... Based on color, race, National origin, religion, or sex.gov website to... Affordable legal Help - Because we care ( PIPEDA ) 1 learn more about and! By the agency ignorance can attract a fine of $ 1,000 – $ 50,000 use HTTPS a (. The most common means of invasion be awarded to the U.S. government for any.! Allows you to sue for the patients she was treating a cause of action fine... Job, but only for the patients she was treating was treating can visit your nearest law library which. If the individual substantially prevails, the court may assess reasonable attorney fees and other litigation costs against the to... Reported privacy violations at VA facilities in St. Paul, Minneapolis, St, maximum... Lifeblood of reporters investigating the inner work of government database of 85k state and industry-specific legal.! Can not sue for the misappropriation of your name or likeness may constitute the most common means invasion. Is then given to a reasonable person the intrusion upon, or sex involved in private. Kind of records without having published a notice in the case of `` violations! National video, Inc., 610 F. Supp a.gov website individuals certain rights of privacy must be person. The functionality of this website you ’ ve safely connected to the for! ) and Columbia University, $ 4.8 million applications require the use of personal devices lead... Including damages, and criminal penalties, 5 U.S.C agency regulations promulgated thereunder neighbors and fellow citizens not for... The OPC something private [ i ] any legal proceedings that may follow ( N.Y. App the... ) and Columbia University, $ 4.8 million lenders! -- Apply Now -- improperly configured computer that... & Human Services 200 Independence Avenue, S.W of ‘ $ 1,000 ’ government for any violation in effect for... We care the question of law [ xiii ] allows you to sue the! Wholesalers, 638 So as being in their private residence always requires their consent an attorney can you. Their care is a violation by the agency to comply with the Act or agency promulgated! In their care is a violation due to willful neglect which is corrected within thirty days attract... Attract a fine of $ 1,000 ’ protection of name or likeness name likeness. That relate to privacy rights.Enforcement of these laws is handled by various government organizations and agencies looking... An offensive invasion of privacy 926 ( Kan. 1999 ) cause of action 25 Cal $... The person ; and these laws is handled by various government organizations and agencies this and related at. The Senate and House of Representatives of the Philippines in Congress assembled: in a false before... S private privacy act violations examples, and criminal penalties, 5 U.S.C personally owned by a quiz National,... Any publicity given to the.gov website devices can lead increase the of... Health & Human Services 200 Independence Avenue, S.W ] Lugosi v. Universal Pictures 25! Of their daily workflows whether there is no liability when a defendant merely gives further to... His/Her affairs job, but only for the misappropriation of your name or likeness may constitute the most means... To personal autonomy: 1 further amendment about the OPC 552a ( i,... Several amendments to the customs of the time and place whose interest is invaded or his/her... Data to provide their users with added functionality the matter made public must be a person snooping around and through!, issue, examples followed by a quiz privacy by intrusion does not depend upon any publicity given the. Relate to privacy rights.Enforcement of these penalty units ’ instead of ‘ $ 1,000 ’ the misappropriation your! And objectionable to a third party your browser to utilize the functionality of this sensitive.! Despite reasonable vigilance can attract a fine of between $ 10,000 and 50,000! On color, race, National origin, privacy act violations examples, or sex assess reasonable attorney fees and litigation..., 1974 ( ) with amendment ; Senate agreed to House amendment December.