Even if you don't intend to do MU, you are still required to have a written data security plan and document reviewing it periodically, in case you are audited.


John
Internal Medicine