In the event of a security breach in regard to protected health information (PHI), providers and other covered entities must notify both the Office for Civil Rights (OCR) and the:

Question

Quizplus · Accepted Answer

Providers and other covered entities must notify both the OCR and the individuals whose records were affected in the event of a security breach in regard to PHI. This is required by the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule. Notification must occur within 60 days of the discovery of the breach.

In the Event of a Security Breach in Regard to Protected