[gruez]

Does getting data stolen through no fault of your own count as a HIPPA violation? If negligent security counts, what's the bar?

[sgarland]

It does, actually. There are four tiers [0], with unknowing violation at the bottom, followed by reasonable cause. Personally I’d place this at least at the reasonable cause tier.

[0]: https://www.ama-assn.org/practice-management/hipaa/hipaa-vio...