title: No harm done? Assessing risk of harm under the federal breach notification rule.
abstract: Provisions within the HITECH Act require that covered entities notify individuals if their protected health information is breached. However, the current regulation allows an exemption if the risk of harm is slight. Assessing risk can be subjective, and privacy officers have been working to create methods to conduct and document their analyses.
authors.affiliation: chris.dimick@ahima.org
authors.forename: Chris
authors.initials: C
authors.lastname: Dimick
mesh_terms: D057171:American Recovery and Reinvestment Act; D003219:Confidentiality / Q000331:legislation & jurisprudence*; D016347:Medical Records Systems, Computerized / Q000331:legislation & jurisprudence; D012308:Risk Management; D014342:Truth Disclosure; D014481:United States