Just curious, but if the Department of Health and Human Services (HHS) commits or experiences a HIPAA-related data breach, do they have to call themselves and self-report? In all seriousness, this is a tremendous amount of PHI lost.
Just curious, but if the Department of Health and Human Services (HHS) commits or experiences a HIPAA-related data breach, do they have to call themselves and self-report? In all seriousness, this is a tremendous amount of PHI lost.