The Department of Health and Human Services Office for Civil Rights has decided to reduce the annual limit of civil penalties applied to HIPAA violations for three of the four penalty tiers.