Outpatient Facility Coding Alert - 2009 Issue 30
PATIENT PRIVACY: Know the Rules When You Experience a Security Breach
Subscribe or sign in to view the full article.
Article Overview
This article explains a federal update on patient privacy and security breach notification requirements under HIPAA-related rules. It covers who must be notified, when substitute notice or media notice may apply, and the broader context of federal guidance on electronic protected health information safeguards. The piece is relevant to physician practices, covered entities, compliance staff, and anyone responsible for privacy and security procedures.
Why This Topic Matters
Privacy and security breaches can trigger mandatory notifications and other compliance steps, so understanding the current federal requirements helps practices respond appropriately and maintain trust. The article also highlights broader security expectations for electronic protected health information and how federal guidance frames those expectations.
Article Sections
-
Breach Notification Requirements
Overview of federal notification requirements after a health information security breach, including who must be informed and the general timing and delivery channels discussed in the update.
-
Substitute Notice and Media Notification
Discussion of circumstances involving missing contact information or a large number of affected individuals, along with the broader notification methods described by the federal update.
-
Encryption and Destruction Guidance
Summary of the article’s discussion of federal guidance related to safeguarding electronic protected health information, including references to security-rule implementation considerations.
What You Will Learn
- How federal breach notification guidance applies to covered entities
- When substitute notice or media-related notification may be part of the process
- What the article says about broader federal guidance on electronic health information safeguards
- Why privacy and security compliance matters for practices handling protected health information
Who Should Read This
- Physician practices
- HIPAA covered entities
- Compliance officers
- Privacy and security staff
- Medical office administrators
- Health information management professionals
Subscribe or sign in to view the full article.


Quick, Current, Complete - www.findacode.com