Attorney Knepper told News 4 that civil and criminal penalties can be applied. Depending on the facts of each case, you may have a civil case for invasion of privacy as well.
Statement from dr. David brown:
In an effort to dispose of some files that were many years old, i made a mistake by using improper procedures for disposal of patient records. Medical practices always have an obligation to protect patient information, regardless of the age of the record. I sincerely regret that this occurred. The files have been retrieved and the records will be disposed of properly. I will fulfill all reporting obligations required by law. I am very sorry for any concern this has caused and want to assure my patients that going forward that i will follow proper disposal procedures. Dr. David brown