There are a few inaccuracies in this article. The "PHI" under HIPAA and the HITECH Act stands for protected health information, not personal health information. Also, HITECH does not "widen the definition of what PHI must be protected". It specifically adopts the HIPAA definition of PHI (see. s. 13400 (12) of HITECH.)
As compared to HIPAA, the HITECH Act does not result in "lower thresholds, shorter timelines and stronger methods for data breach victim notification" because the original HIPAA privacy and security rules were silent on breach notification.
The true range of penalties under HITECH is from $100 - $1.5 million. They do not start at $25,000 as stated in the article.
Five Steps to HITECH Preparedness
Ready for HITECH's stringent Personal Health Information protection requirements? ID Experts' Rick Kam provides a high-level plan.
» View Article
There are a few inaccuracies in this article. The "PHI" under HIPAA and the HITECH Act stands for protected health information, not personal health information. Also, HITECH does not "widen the definition of what PHI must be protected". It specifically adopts the HIPAA definition of PHI (see. s. 13400 (12) of HITECH.)
As compared to HIPAA, the HITECH Act does not result in "lower thresholds, shorter timelines and stronger methods for data breach victim notification" because the original HIPAA privacy and security rules were silent on breach notification.
The true range of penalties under HITECH is from $100 - $1.5 million. They do not start at $25,000 as stated in the article.
Dirty Tricks: Social Engineers' Favorite Pickup Lines
Tabletop Exercises: 3 Sample Scenarios
19 Ways to Build Physical Security Into Your Data Center
Get instant notifications when whitepapers, webcasts and case studies are added to our library. Sign up for a Resource Alert now!
CSO Corporate Partners
» More blogs
CSO Perspectives
Santa Clara, California
(ISC)2 members can earn up to 24 CPE Credits!
Trend Micro ranked #1 against real-world malware. Read more.
64-page prescriptive guide to security, compliance, and IT operations.
Removing Barriers To Better Server Virtualization Efficiency
Mining for Gold: Cybercrime Prevention and the Role of Log Management
The Executive Guide to Data Loss Prevention
Organizations can spend up to 50% more on compliance efforts than necessary.
White Paper: A Security Blueprint Delivered From within the Network
Read the RSA report: Security for Business Innovation
Upgrading to VMware vSphere with vWire
Explore the increasing importance of log management as cybercrime threats grow.
The Tripwire HIPAA Solution: Meeting the Security Standards Set Forth in Section 164
Implementing Best Practices for Web 2.0 Security
Five Ways to Reduce Your IT Audit Burden
THE IDG NETWORK