Notification of a Breach (Breach)

Overview:§164.404(d)Methods of Notification.The notification required by paragraph (a) of this section shall be provided in the following form: (1)(i) Written notification by first-class mail to the individual at the last known address of the... Read More

Overview:§164.404(a)(1)Notice to Individuals.A covered entity shall, following the discovery of a breach of unsecured protected health information, notify each individual whose unsecured protected health information has been, or is reasonably... Read More

Overview:§ 164.410Notification by a Business Associate.(a) Standard. (1) General Rule. A business associate shall, following the discovery of a breach of unsecured protected health information, notify the covered entity of such breach. (2) For... Read More

Overview:§164.406(a)Notification to the Media.For a breach of unsecured PHI involving more than 500 residents of a State or jurisdiction, a covered entity shall, following the discovery of the breach as provided in §164.404(a)(2), notify prominent... Read More

Overview:§164.408Notification to the Secretary.(a) A covered entity shall, following the discovery of a breach of unsecured protected health information as provided in § 164.404(a)(2), notify the Secretary.(b) For breaches of unsecured protected... Read More

Overview:§164.404(b)Timeliness of Notifications.Except as provided in §164.412, a covered entity shall provide the notification required by paragraph (a) of this section without unreasonable delay and in no case later than 60 calendar days after... Read More