The department mitigates, to the extent practicable, any harmful effect known to the department resulting from a use or disclosure of PHI in violation of this policy or the requirements of HIPAA by the department or its business associates. Measures taken will depend on individual circumstances.

[8.8.5.16 NMAC - N, 4/30/2003]