For posting personal information on 20,000 patients, without consent, on a public website for nearly a year beginning in 2010, California-based Stanford Hospital & Clinics and billing contractor Multi-Specialty Collection Services LLC may end up paying a more than $4 million settlement, according to a report.

Los Angeles County Superior Court Judge Elihu Berle tentatively approved the $4.125 million settlement on Wednesday, which is based on a class-action filed on Sept. 28, 2011 for $20 million.

Impacted patients will receive more than $100 each and the hospital must provide a two-year program for training staffers on handling patient data, according to the report.

Health care providers are prohibited from disclosing patient records without consent, as per the Confidentiality of Medical Information Act.