Entities covered under Health Insurance Portability and Accountability Act also may be subject to security enforcement by the Federal Trade Commission, the latter confirmed with a unanimous ruling against a medical testing laboratory that mishandled patient information.
