§160.412 Waiver.
For violations described in §160.410(b)(2) or (c) that are not corrected within the period specified under such paragraphs, the Secretary may waive the civil money penalty, in whole or in part, to the extent that the payment of the penalty would be excessive relative to the violation.
Make sure you are Omnibus Rule Compliant: HIPAA Privacy Checklist.