New regulations effective Sept. 23, 2009, require all physicians who are covered by HIPAA to notify patients if there are breaches of security involving their medical information. These requirements apply in addition to any notification obligations imposed by state law, and they also supplement the obligations imposed by the HIPAA Privacy and Security Rules.

Learn more by downloading a PDF summary from the American Medical Association.