HIPAA Breach Notification Rule

1. Breach notification overview

   Definition of breach and unsecured PHI.

2. Risk assessment of breach

   Four-factor assessment of probability of compromise.

3. Notice to individuals

   Timing within 60 days and content of notice.

4. Media and HHS notice

   Notice for breaches affecting 500 or more individuals and annual reporting for smaller ones.

5. Encryption and destruction guidance

   Safe harbor for PHI rendered unusable through encryption or destruction.

6. OCR breach portal

   Public listing of reported breaches.

7. 45 CFR Part 164 Subpart D

   Regulation text for notification standards.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.