From the federal government, an excellent map to navigating HIPAA's privacy, security, and breach-notification rules.
Criminal attacks now are the number-one cause of data breaches in health care—up 125% in the past 5 years alone. Forty-five percent of the health care organizations surveyed by the Ponemon Institute, a leading research center on matters related to privacy and data protection, reported "criminal attack" as the root cause of data breaches—with "lost or stolen computer device" (43%) and "unintentional employee action" (40%) trailing close behind.1