
Why the Breach Notification Rule in Healthcare Matters
Everyone involved with healthcare should know about the HIPPA Breach Notification Rule. This regulation mandates that HIPAA-covered entities and their business associates report breaches of unsecured protected health information (PHI). Additionally, similar provisions from the Federal Trade Commission (FTC) apply to vendors of personal health records and their third-party providers. In simple terms, if you mishandle sensitive patient data, you’re legally required to notify affected parties, including the media and federal authorities in some cases. What is the Breach Notification Rule? A “breach,” by definition, is the improper use or disclosure of PHI that compromises its security or privacy. Unless proven otherwise through a rigorous risk assessment, any such incident