Christina Heide, JD recently presented at the 2010 NIST HIPAA conference and provided a presentation about the how breach notification works. She reiterated that breach notification applies to unsecured PHI, which means protected health information not secured by encryption or properly destroyed.




