This Notice of Privacy Practices document is published by the California Medical Association’s (CMA) legal team. You will also find this information and concise answers to many more of your medical practice questions in CMA’s California Physicians’ Legal Handbook, or through CMA’s 24/7 information on demand service, “CMA ON-CALL,” available at www.cmadocs.org.

Four Factors to evaluate for new breach risk assessment with the probability that PHI has been compromised. To avoid penalties for noncompliance, your practice must comply with the Omnibus Rule by Sept. 23, 2013.