Which HITECH-related disclosure is considered the greatest public relations challenge?

• A. Tracking all disclosures including those for TPO
• B. Notification to media of security breaches if more than 500 individuals are affected
• C. Transferring electronic medical records directly to other entities upon patient request
• D. Responding to patient requests for electronic medical records in an encrypted format

Answer: (B)

The idea behind this item is the public-facing breach notification requirement added by HITECH and how it affects reputation. When a data breach affects 500 or more individuals, the rule requires the organization to notify the media. That means news about the breach becomes public, inviting widespread media attention, public scrutiny, and potential loss of patient trust. That visibility is what creates the biggest public relations challenge, because even a well-handled breach can be magnified and reach patients, regulators, and partners quickly.

Other options involve more routine or patient-centered processes. Tracking all disclosures internal to the organization is an administrative duty, not a public incident. Transferring electronic records to another entity at the patient’s request is a standard patient-rights activity, typically managed directly with the patient. Providing records in encrypted form is a security best practice that reduces risk rather than amplifying it publicly.