The Office of Civil Rights may impose civil (monetary), criminal (imprisonment) or both penalties depending on the violation. Blue Cross Blue Shield of Michigan and Blue Care Network employees could face sanctions or other discipline for violating privacy policies and procedures, including termination of employment, depending on the violation.