Health Information Security – Credit for Trying
Last year, Congress directed the Secretary of Health and Human Services (HHS) to take into consideration efforts by organizations subject to HIPAA security standards (“covered entities” and “business associates”) to implement “recognized security practices” whenever HHS determines fines and other remedies for HIPAA security violations. …the Secretary shall consider whether the covered entity or business…
