
The U.S. Department of Health and Human Services has released what one department official describes as "the most sweeping changes to the HIPAA Privacy and Security Rules since they were first implemented," but at least one organization is concerned that the requirements may be too burdensome for medical practices.