WALKING ON EGGSHELLS: A children's psychiatric facility in Connecticut is facing a potential class action lawsuit alleging that it left patient and employee data vulnerable to a cyberattack and that it delayed notification to plaintiffs and regulators about the breach. In this episode, David discusses an important doctrine in tort law that could help establish the plaintiffs establish standing to sue and magnify their damages. He also outlines steps that healthcare facilities can take to enhance their cybersecurity controls and comply with HIPAA and other data privacy laws.