Evan P. asked

⚖️  Law

We are a dental office in Texas. Our individual shred boxes were mistakenly thrown away by our cleaning crew instead of being emptied into the locked shred container. We have contacted the cleaning company, signed a BAA, and are concerned if this incident constitutes a data breach under HIPAA regulations. What steps should we take to determine if a breach has occurred and if we need to notify patients and the media?

October 25th, 2023

Jennifer W. answered

Under HIPAA, a data 'breach' is generally defined as an impermissible use or disclosure that comprom...

October 25th, 2023

Sign Up to View Full Expert Answers

Create an account to view answers and interact with the community!