It is old news that President Obama signed the American Recovery and Reinvestment Act, popularly known as the Stimulus Package, into law last month. What hasn’t made the news are the dramatic changes the law makes to HIPAAs (Health Insurance Portability and Accountability Act) Security Rules. The changes subject business associates to the rules, requires notifications for breaches, expands who may seek damages and increases penalties for violations. Here are just some of the biggest changes to the HIPAA Security Rules.