"The most frequent violations of the Health Insurance Portability and Accountability Act and the Health Information Technology for Economic and Clinical Health Act regulations are not hacking! They are: [1] Lost/stolen laptops, mobile devices, paper medical records, thumb drives; [2] No security risk assessment or assessment not enterprise-wide; [3] No or outdated Business Associate Agreement; [4] Improper disclosure of PHI."  MORE >>