As stated in the article, “HITECH did not attempt to cure the major flaws in HIPAA, such as the failure of HIPAA to control what patient information is collected and for what purposes or the generally unimpeded flow of data beyond the circle of care. However, it did limit some secondary uses of data by tightening up the consent processes for the marketing and sale of patient data” (CITE). Also appearing in the new legislation was a newer model of data protection; this new model came to be known about as breach notification, which ultimately requires that covered entities must report when data is breached or compromised (CITE). This made for HIPAA to increase the consequences and establish the OCR (Office for Civil Rights), organized by The Obama