Prj 3

Learning Topic

Information Security Breaches

Print

yougyet / E+ / Getty Images

According to HIPAA, a  breach is any impermissible use or disclosure that compromises the security or privacy of protected health information.

Covered entities (CEs) and business associates (BAs) are responsible for reporting any breaches of unsecured personal health information (PHI). 

CEs and BAs that fail to comply with the HIPAA rules can face civil and criminal penalties.

Resources

The following link will take you to a document that will discuss breach notification, HIPAA enforcement, and other laws and requirements that an IT professional should be aware of:

Breach Notification, HIPAA Enforcement, and Other Laws and Requirements