American Recovery and Reinvestment Act
A wide-ranging act passed in 2009 that authorized $787 billion in spending and tax cuts over a 10-year period. Title XIII includes strong privacy provisions for Electronic Health Records, banning the sale of health information and promoting the use of audit trails and encryption and providing rights of access for patients. Also mandated that each individual whose health information has been exposed be notified within 60 days after discovery of a data breach