Government Accountability Office: U.S. government talks but doesn’t listen when it comes to reporting data breaches. Report: Department of Health and Human Services needs to implement a formal mechanism for HIPAA-covered entities and business associates to give and receive feedback about that process. The number of individuals affected each year ranged from 5 million to 113 million, the report says. The largest number of affected individuals in a single year was in 2015, in large part when cyberattacks on health plans Anthem Inc. and Premera Blue Cross resulted in those companies reporting breaches.”]
Source: https://www.govinfosecurity.com/gao-hhs-needs-breach-reporting-feedback-mechanism-a-19469