This advance notice of proposed rulemaking would solicit the public's views on establishing a methodology under which an individual who is harmed by an offense punishable under HIPAA may receive a percentage of any civil money penalty or monetary settlement collected with respect to the offense. The Department is required by section 13410(c)(3) of the Health Information Technology for Economic and Clinical Health Act (title XIII of the American Recovery and Reinvestment Act of 2009) to issue rules to establish this methodology.