β Identifying the infected individual
Why it matters: Naming or clearly implying who the person is breaches health privacy expectations and can expose the organization to a formal complaint or legal claim.
Fix: Refer only to the affected area and date range. Confirm in the notice itself that individual identity will not be disclosed.





















