The office of civil rights (OCR) is the enforcing arm of HIPAA and determines the amount to fine in the event of a HIPAA breach. The fines are calculated based on the medical practice, size, number of patients effected, etc. and if there is willful neglect.