In the Event of a Security Breach in Regard to Protected

In the event of a security breach in regard to protected health information (PHI), providers and other covered entities must notify both the DHHS Office for Civil Rights (OCR) and the:
A)individuals whose records were affected.
B)Centers for Medicare and Medicaid Services (CMS).
C)insurance carriers whose claims were affected.
D)Consumer Protection Agency.