NAID : News : Access to Paper Documents Included In Initial HITECH Health Data Breach Notifications

The US Department of Health and Human Services (HHS) has released the first list of data breach notifications resulting from the new HITECH requirement and it includes at least one case of a data breach notification resulting from unauthorized access to paper records. While both HHS and the FTC have written publicly that potential unauthorized access to paper-based records constituted a “data breach,” this first report shows that principle in action.