I agree with commenter (re: HHS-OCR-2009-0010-0002) that the Rule should help covered entities be more precise in breach notification scenarios where a the risk of harm to a population may vary with each individual in the population. Are we to assume that we should analyze the breach of an entire population of potentially impacted individuals and carve out only those whose risk of harm is significant?
Comment on FR Doc # E9-20169
This is comment on Rule
Breach Notification for Unsecured Protected Health Information
View Comment
Related Comments
View AllPublic Submission Posted: 08/25/2009 ID: HHS-OCR-2009-0010-0002
Oct 23,2009 11:59 PM ET
Public Submission Posted: 08/25/2009 ID: HHS-OCR-2009-0010-0003
Oct 23,2009 11:59 PM ET
Public Submission Posted: 08/26/2009 ID: HHS-OCR-2009-0010-0004
Oct 23,2009 11:59 PM ET
Public Submission Posted: 08/26/2009 ID: HHS-OCR-2009-0010-0005
Oct 23,2009 11:59 PM ET
Public Submission Posted: 08/31/2009 ID: HHS-OCR-2009-0010-0008
Oct 23,2009 11:59 PM ET