Health care providers, health plans, and other entities covered by the Health Insurance Portability and Accountability Act take note: The U.S. Department of Health and Human Services has issued new rules requiring those entities to notify individuals when their health information is breached.
The “breach notification” regulations implement provisions of the Health Information Technology for the Economic and Clinical Health (HITECH) Act, passed as part of the American Recovery and Reinvestment Act.

