The Health and Human Services Office for Civil Rights (OCR) has unveiled on its breach notification Web site the names of "private practices" that have reported data breaches affecting 500 or more individuals, HealthLeaders Media reports. When the OCR launched the Web site in February, as required by the HITECH Act, it listed sole practitioners who had experienced large breaches of unprotected health information as "private practices." But in April, the office proposed to make the posting of such breaches "routine use," which allows OCR to post the information without first seeking the consent of those involved.
Full Story