Lawmakers urge lower bar for health data breach notification

Two key chairmen of U.S. House committees urged Health and Human Services Secretary Kathleen Sebelius to revise or appeal the agency's controversial "harm standard" that would trigger a personal health record data breach notification. Under the current rules, for companies that secure health information using encryption or destruction, no breach notification is necessary. For those companies that don't use encryption/destruction to protect the health data of individuals, notification isn't necessary if the breach doesn't rise to the harm standard established in the rules.

Read More