No more paper tiger: promise and peril as HIPAA goes HITECH.

The HITECH Act, passed in 2009 by the federal government, deepens the concerns for patient privacy faced by healthcare organizations subject to HIPAA. This article examines the law and demonstrates that healthcare entities are facing greater duties to safeguard patients' protected health information, as well as severe civil and criminal penalties should they fail to do so. In recognition of this heightened liability, healthcare entities must reassess their methods for handling patient data and take action in key areas to ensure that risk is contained.