title: High stakes. HITECH's privacy provisions will make costly security breaches even more painful to bear.
abstract: * The HITECH section of ARRA includes provisions relating to protected health information that could significantly alter the C-suite leader's strategy. * Patients will be entitled to request an accounting of disclosure for up to three years after the date of request. The onus will be on hospital leaders to put in place a process that makes accounting available without disrupting operations or patient care. * Because of the increased risks hospitals now face, it is critical that executives are aware of the new requirements, and are either involved in or have a solid understanding of the organization's breach notification policies.
authors: Kate Huvane
authors: KH
authors: Gamble
mesh_terms: D016494:Computer Security / Q000331:legislation & jurisprudence; D003219:Confidentiality / Q000331:legislation & jurisprudence*; D008490:Medical Informatics / Q000331:legislation & jurisprudence*; D014481:United States