The Indiana Medical Licensing Board found an Indianapolis doctor's handling of information related to the abortion of a 10-year-old victim of rape from Ohio violated privacy laws, USA Today reports. Dr. Caitlin Bernard was fined USD3,000 and will receive a letter of reprimand. The state attorney general's office said she shared the girl's age and state of residence with a newspaper. Indiana Deputy Attorney General Cory Voight called it an "egregious violation" of patient privacy. Editor's note: IAPP Managing Director, Washington, D.C., Cobun Zweifel-Keegan, CIPP/US, CIPM, offered his take on steps to update the Health Insurance Portability and Accountability Act’s Privacy Rule to implement federal privacy protections for reproductive health information.