The HITECH Act, part of the massive economic stimulus package, will provide as much as $27 billion in incentives to hospitals and physicians who implement certified EHRs. But qualifying for the incentive payments will be a challenging task that involves meeting tough security requirements.

In addition, the HITECH Act required HIPAA modifications that, among other things, clarify that...