Into the Breach.

The article offers several things U.S. health care facilities and organizations may consider upon breaches of protected health information (PHI), a rule on which is expected to be finalized by late 2011. It says that a written notification is required if the breach could pose significant risks and should be sent to the affected individual immediately. Moreover, organizations should have written policies and procedures, and may impose sanctions against defiant employees to mitigate breaches.