§ 164.408(c)—§ 164.408(c)
>Control Description
For breaches of unsecured protected health information involving less than 500 individuals, a covered entity shall maintain a log or other documentation of such breaches and, not later than 60 days after the end of each calendar year, provide the notification required by paragraph (a) of this section for breaches discovered during the preceding calendar year, in the manner specified on the HHS web site.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.