Privacy and security for healthcare organizations: the regulatory framework, protected health information, patient rights, permitted uses and disclosures, the security rule and risk analysis, administrative, physical and technical safeguards, breach notification, business associates, state laws, emerging technologies, incident response, training and building a privacy program. Eighteen lessons.