Now that the U.S. Department of Health and Human Services (HHS) has released an interim final rule implementing the breach notification provisions of the Health Information Technology for Economic and Clinical Health (HITECH) Act, risk managers and compliance officers have been huddling with their teams (including their attorneys) to determine exactly how it will impact them and what steps they must take to be in compliance.