The New Omnibus Rule

The Omnibus Final Rule under HIPAA has strengthened the privacy protections for protected health information (PHI) and gives individuals new rights to their health information. Healthcare and Life Sciences Partner Shannon Hartsfield says that even with the added security, it is important to report security incidents even if they do not result in a breach.

"A stolen laptop that is encrypted could suggest that even if the information can't be accessed, there could be a physical vulnerability that must be looked at," Ms. Hartsfield says. "Is there a broken lock on a door or some other situation that leaves PHI vulnerable? It's not only about the information itself; it's also about keeping the environment secure overall."

READ: The New Omnibus Rule