45 C.F.R. § 150.317

In determining the amount of any civil money penalty, CMS will identify the lawful purpose or purposes of the penalty, and take into account the following factors as appropriate to the circumstances of the case:

(a) The entity's previous record of compliance. This may include any of the following:

(1) Any history of prior violations by the responsible entity, including whether, at any time before determination of the current violation or violations, CMS or any State found the responsible entity liable for civil or administrative sanctions in connection with a violation of PHS Act requirements.

(2) Documentation that the responsible entity has submitted its policy forms to CMS for compliance review.

(3) Evidence that the responsible entity has never had a complaint for noncompliance with PHS Act requirements filed with a State or CMS.

(4) Such other factors as justice may require.

(b) The gravity of the violation. This may include any of the following:

(1) The frequency of the violation, taking into consideration whether any violation is an isolated occurrence, represents a pattern, or is widespread.

(2) The level of financial and other impacts on affected individuals.

(3) Other factors as justice may require.