Question: In the reading for this module you may have noticed that HHS, for HIPAA purposes, focuses reporting obligations on whether or not PHI was compromised

In the reading for this module you may have noticed that HHS, for HIPAA purposes, focuses reporting obligations on whether or not "PHI" was compromised in a data breach, whereas the Florida law (501.171, (4)(c), F.S.) focuses on whether the data breach poses a risk of identity theft or financial harm.Interestingly, the original breach rule for HIPAA used essentially the same standard as the Florida law currently has, however, it was modified in 2013 to the current standard.In your opinion, if the goal of notifying individuals of a data breach is to protect the individual, what standard, HIPAA's current rule or Florida's statute, is more appropriate?Please support your answer.

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer
Step: 1 Unlock blur-text-image
Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock
Step: 3 Unlock

Students Have Also Explored These Related Law Questions!