Compliance
Breach Notification Rule
Requires notice to patients (and sometimes HHS and the press) after a PHI breach.
The Breach Notification Rule requires Covered Entities to notify affected individuals — and, for breaches over 500 people, HHS and prominent media — within 60 days of discovery. Encrypted data that's properly secured is exempt from the rule.
Related terms
Need help moving patient data?
We’ve done it 140+ times across 70+ EHRs. 15-minute discovery, no pressure.