Which of the Following Statements Best Describes the HIPAA Breach

Which of the following statements best describes the HIPAA breach notification rules?

A) Covered entities are required to notify individuals for any ePHI breach within 90 days after the discovery of the breach.
B) Covered entities are required to notify individuals for breach of unsecured ePHI within 60 days after the discovery of the breach.
C) Covered entities are required to notify individuals for any ePHI breach within 30 days after the discovery of the breach.
D) Covered entities are required to notify individuals for breach of unsecured ePHI within 30 days after the discovery of the breach.