How Soon Must A Hipaa Breach Be Reported?
How Soon Must A Hipaa Breach Be Reported? If a breach affects 500 or more individuals, covered entities must notify the Secretary without unreasonable delay and in no case later than 60 days following a breach. If, however, a breach affects fewer than 500 individuals, the covered entity may notify the Secretary of such breaches