Healthcare facilities that have already suffered data breaches are implementing strengthened technical and organizational measures, but also uncovering gaps in practical implementation.