What are your thoughts about use of the internet for medical information? Is it good for the average consumer to seek out information there?

Can an organization self-report a violation? Are they required to self-report? Will self-reporting make the investigation easier on them?

Exactly how does a health care provider protect paper and electronically records? What are some of the common methods used? How can we be assured that PHI is released only to those we authorize.