
A dermatologist had his laptop stolen from his car. The computer contained 8,000 patient records, but all were encrypted. The doctor sought legal advice, reached out to all patients notifying them of the potential breach of PHI, and hired a service to help protect his patients. Can his patients sue him?
