HC Reform Update from Mark Sanna: The Obama administration is rewriting new rules on medical privacy after criticism from consumer groups and members of Congress. According to the new rules, health care providers and insurers have to notify patients of a privacy breach only if they find that the violation posed a significant risk of financial, reputational or other harm to the individual.