The American Hospital Association supports the inclusion of a "risk threshold" in the Department of Health and Human Services' interim final rule covering breach notifications, according to a comment letter sent to HHS officials.

Under the interim final rule, an organization that experiences a breach of protected health information need not provide notification if it determines there is no significant harm to affected individuals. This level of standard is consistent with a majority of state breach notifications, according to the AHA.

Register or login for access to this item and much more

All Information Management content is archived after seven days.

Community members receive:
  • All recent and archived articles
  • Conference offers and updates
  • A full menu of enewsletter options
  • Web seminars, white papers, ebooks

Don't have an account? Register for Free Unlimited Access