Breach Notification Rule

GPTKB entity

Statements (22)
Predicate Object
gptkbp:instanceOf gptkb:legislation
gptkbp:appliesTo business associates
covered entities
electronic and paper records
gptkbp:codifiedIn gptkb:45_CFR_§§_164.400-414
gptkbp:enforcedBy gptkb:U.S._Department_of_Health_and_Human_Services
gptkbp:excludes secured PHI using specified technologies or methodologies
https://www.w3.org/2000/01/rdf-schema#label Breach Notification Rule
gptkbp:legalBasis gptkb:Health_Information_Technology_for_Economic_and_Clinical_Health_Act
gptkbp:notificationTimeline without unreasonable delay and no later than 60 days after discovery of a breach
gptkbp:partOf gptkb:HIPAA
gptkbp:penaltiesForNoncompliance civil monetary penalties
gptkbp:purpose to ensure individuals are informed of breaches of their protected health information
gptkbp:relatedTo gptkb:HIPAA_Privacy_Rule
gptkb:HIPAA_Security_Rule
gptkbp:requires notification of individuals affected by a breach of unsecured protected health information
notification of the Secretary of HHS
notification of the media in certain cases
gptkbp:startDate September 23, 2009
gptkbp:bfsParent gptkb:HIPAA_Compliance
gptkb:HIPAA_Regulations
gptkbp:bfsLayer 6