Regulatory Update: HITECH’s HHS and FTC Security Breach Notification Requirements
August 27, 2009
The Health Information Technology for Economic and Clinical Health Act (HITECH Act) includes significant investment in health information technology to facilitate the adoption of a U.S.-wide health information network, and requires covered entities, business associates, vendors of personal health records and related entities to notify individuals when their personal health information is subject to a breach of security. The U.S. Department of Health and Human Services and the Federal Trade Commission recently issued rules relating to these security breach notification requirements. Compliance with these regulations will require the expenditure of significant time and expense, and, therefore, health care and related industries should begin immediately familiarizing themselves with the rulemakings and updating their processes and procedures to comply accordingly.
Please click here to view the entire White Paper in Adobe PDF format.
(Adobe Acrobat Reader required, available for free download here)
