1670.020 HIPAA Security: Duty to Report Security Incidents Involving Protected Health Information Policy
HIPAA Security Standards require that departments and units that create, maintain or transmit electronic protected health information protect it from unauthorized access, improper alteration or destruction. They also have a duty to report security incidents involving protected health information.
