In this letter to HHS OCR, the Confidentiality Coalition responds to an RFI on implementing two HITECH Act provisions. It asks OCR to give regulated entities credit for the recognized security practices they have in place, using a sliding scale of reduced enforcement, and to limit payouts to harmed individuals to clear economic harm so OCR can prioritize its cybersecurity work.
