Many social workers are unaware that there is a distinct insurance risk difference between a social worker causing a client records breach, and a third party causing a client records breach. HIPAA holds the social worker responsible for both events and penalizes the social worker for both events.
