HITECH (Health Information Technology for Economic and Clinical Health) is a US federal law that expands the privacy and security requirements of HIPAA. HITECH also established new breach notification requirements, which require covered entities to notify individuals if their unsecured PHI is breached. Additionally, HITECH increases penalties for HIPAA violations and gives states the authority to bring civil actions on behalf of individuals affected by HIPAA violations.