Enforcement of the confidentiality of patient safety work product is crucial to maintaining an environment for providers to discuss and analyze patient safety events, identify causes and improve future outcomes. The enforcement provisions are found at Subpart D of the Patient Safety Rule. OCR seeks voluntary compliance with the confidentiality provisions by providers, patient safety organizations (PSOs) and responsible persons that hold patient safety work product. OCR may conduct compliance reviews and investigate complaints alleging that patient safety work product has been disclosed in violation of the confidentiality provisions. If OCR determines that a violation has occurred, OCR may impose a civil money penalty of up to $11,000 per violation. OCR provides technical assistance to persons seeking to comply with the confidentiality provisions and public information regarding the administration of the enforcement program. Learn more about the Patient Safety Rule Penalty Inflation Adjustment.