October 27, 2009
The Department of Health and Human Services should retain its "risk of harm" standard in the final rule on breach notification for unsecured protected health information, the American Hospital Association said in a comment letter to the agency on Friday.