Data Privacy & Cybersecurity

Plain answers to Data Privacy and Cybersecurity questions, with every citation independently ruled by the Kingsfield judge against the primary-law corpus.

• Who must a covered entity notify when unsecured protected health information is breached, and is media notice always required?45 CFR 164.404
• Which HIPAA Security Rule provision requires a covered entity to conduct a security risk analysis?45 CFR 164.308