HITECH- the Health Information Technology for Economic and Clinical Health Act of 2009 expanded the responsibilities of business associates under the security and privacy rules by requiring HIPAA covered entities and their business associates to provide notification following a breach of unsecured protected health information. HITECH also includes new limitations on the sale of protected health information, marketing, and fundraising communications; and stronger individual rights to access electronic medical records and restrict the disclosure of certain information.