Welcome to Benefits Challenge

Wednesday, September 02, 2009

An employer discovers that unsecured health information of more than 500 employees at one of its work locations has been compromised. Under the HITECH Act Regulations issued in August 2009, which of the following actions must the employer take?

• A. No action is necessary
• B. Notify prominent media outlets
• C. Notify each individual in writing
• D. Notify the Department of Health and Human Services (HHS)