Summary: This show will discuss the kind of analysis required to decide whether breach notification is triggered under the HITECH Act for a given security incident and if so, how notication show proceed. The bottom line is that not all security incidents trigger notification but the wicked problem remains how to determine the ones that do and how to manage the process according to applicable law.