5 pages. The Federal Register document is a reprint of guidance released April 17 by HHS on its web site. Excerpt: [The HITECH statute] provides that no later than 60 days after enactment, the Secretary shall, after consultation with stakeholders, issue (and annually update) guidance specifying the technologies and methodologies that render [Personal Health Information] unusable, unreadable, or indecipherable to unauthorized individuals.... Because the [HIPAA] breach notification requirements apply only to breaches of unsecured PHI, this guidance provides the means by which covered entities and their business associates are to determine whether a breach has occurred to which the notification obligations under the Act and its implementing regulations apply.

MORE >>