No harm done? Assessing risk of harm under the federal breach notification rule.
Provisions within the HITECH Act require that covered entities notify individuals if their protected health information is breached. However, the current regulation allows an exemption if the risk of harm is slight. Assessing risk can be subjective, and privacy officers have been working to create methods to conduct and document their analyses.
Dimick
Chris
C
chris.dimick@ahima.org
D057171:American Recovery and Reinvestment Act; D003219:Confidentiality / Q000331:legislation & jurisprudence*; D016347:Medical Records Systems, Computerized / Q000331:legislation & jurisprudence; D012308:Risk Management; D014342:Truth Disclosure; D014481:United States