HIMSS Word of the Day #106: Breach (HIPAA Breach of Security)
Under HIPAA, a breach occurs when protected health information is obtained, accessed, used, or disclosed in a way the Privacy Rule does not permit and that compromises its security or privacy. This post explains the definition and its exceptions, the four-factor risk assessment, notification timelines, how encryption changes the analysis, and why prompt reporting by staff matters.