The federal agencies have long spoken of enforcing breaches, but only one is on record to date. The fear does not seem to be the burning platform that HIPAA implementation was 5 + years ago. Routine audits are conducted, no new ground seems to be broken by institutions to assess their vulnerability. Information Governance umbrella HIPAA, related state statutes, identity theft, credit protection, and the like. It is the essence of public trust: to maintain their confidentiality as the workplace has evolved from paper to electronic. Have you tested your system lately? You probably should.
