To comply with the Health Information Technology for Economic and Clinical Health (HITECH) Act, the Office for Civil Rights has posted to the Department of Health and Human Services Web site the 32 covered entities that have reported protected health information breaches. HITECH mandates that breaches of protected health information affecting more than 500 individuals be reported to HHS within 60 days and made public. That includes covered entities' business associates. Smaller breaches must be reported annually, Health Data Management reports.
Full Story