Glossary · Regulation

HIPAA Breach Notification Rule

HIPAA Breach Notification Rule (45 CFR 164.400-414)

Updated

The HIPAA Breach Notification Rule requires covered entities to notify affected individuals, HHS and in some cases the media after a breach of unsecured protected health information.

Individuals must be told without unreasonable delay and within 60 days of discovery; business associates must notify the covered entity, and encrypted data that meets HHS guidance is not considered unsecured.

Official source

HHS: Breach Notification Rule

See also

Definitions written by Anpheros from the official sources linked on each page. General information about standards and regulation, not legal or medical advice. All terms →