In This Issue:

- Definition of “Unsecured Protected Health Information”

- Notice Requirements

- Action Items to Comply with the Breach Notification

- Excerpt from Definition of “Unsecured Protected Health Information”:

The unauthorized person who used the PHI or to whom the disclosure was made. For example, was the PHI impermissibly disclosed to another entity obligated to abide by HIPAA? If so, there may be a lower probability that the PHI has been compromised because the recipient of the PHI is obligated to protect the privacy and security of the PHI in a similar manner as the disclosing entity.