A remote coder’s unencrypted laptop containing downloaded ePHI work queues is stolen from a car. What is the immediate compliance implication under the HIPAA/HITECH framework?
Select an answer to reveal the explanation.
Short Explanation
Unencrypted laptop plus PHI plus theft equals “call privacy now,” not “hope nobody notices.” Unsecured PHI walking out the door starts the breach-assessment clock.
Full Explanation
Loss or theft of devices containing unsecured ePHI typically triggers breach risk assessment and potential notification obligations under the HIPAA Breach Notification Rule as reinforced in the HITECH era. Encryption and rapid incident reporting are key safeguards. Coders must escalate such events through organizational privacy/security channels.