HIPAA requires practices to assess their PHI as part of their risk management process. The video below from the Office of the National Coordinator for Health IT,  shares information about the benefits of completing a Risk Assessment for your practice.