Security professionals warn Congress that as healthcare organizations are increasing the use of electronic medical records, they are not protecting these records. Security professionals agree that in order for the public to trust these records, healthcare organizations need to start working on database security best practices. “The effort to promote widespread adoption and use of health IT to improve individual and population health will fail if the public does not trust it,” said Deven McGraw, director of the Health Privacy Project for the Center for Democracy. McGraw: Even with incentives in place for organizations to be exempt from costly breach notifications if exposed data is encrypted.”]