Today, the Department of Health and Human Services (HHS) issued a notification of enforcement discretion changing its interpretation of the Health Information Technology for Economic and Clinical Health (HITECH) Act of 2009 resulting in a reduction in the amount of the cumulative annual penalty limit for violations of HIPAA. Our colleagues in the Privacy, Data