Health facility reporting of unauthorized access to medical information

Requires licensed health facilities to prevent unauthorized access to patients' medical information and to report any unlawful or unauthorized access, use, or disclosure to the Department of Public Health and to the affected patient within 15 business days of detection.