This article outlines the key steps a health practice can take towards managing its compliance with privacy laws and data breach notification requirements.