“If you haven’t had a breach at your organization, you aren’t looking hard enough because everyone has them.” That’s the message health attorney Kirk Nahra, a partner at Wiley Rein LLP in Washington, D.C., brought to an education session at the American Health Information Management Association’s annual conference in Atlanta.

Walking through components of the revamped HIPAA rules now in effect, Nahra counseled that the single most important thing to do in a breach situation is to act quickly to understand and mitigate effects of the breach to eliminate a realistic chance of risk and be able to avoid public notification. “In an extraordinary amount of cases, you can actually fix the problem if you act quickly.”

Register or login for access to this item and much more

All Health Data Management content is archived after seven days.

Community members receive:
  • All recent and archived articles
  • Conference offers and updates
  • A full menu of enewsletter options
  • Web seminars, white papers, ebooks

Don't have an account? Register for Free Unlimited Access