Implementing practices to avoid a medical data breach greatly reduces the risk of encountering one. In the event that you do, however, you need to be prepared to take action that lessens the repercussions from patients, the public and, of course, HIPAA.