45 CFR 164.406 - Notification to the media.

§ 164.406 Notification to the media.

(a)Standard. For a breach of unsecured protected health information involving more than 500 residents of a State or jurisdiction, a covered entity shall, following the discovery of the breach as provided in § 164.404(a)(2), notify prominent media outlets serving the State or jurisdiction.

(b)Implementation specification: Timeliness of notification. Except as provided in § 164.412, a covered entity shall provide the notification required by paragraph (a) of this section without unreasonable delay and in no case later than 60 calendar days after discovery of a breach.

(c)Implementation specifications: Content of notification. The notification required by paragraph (a) of this section shall meet the requirements of § 164.404(c).

[ 74 FR 42767, Aug. 24, 2009, as amended at 78 FR 5695, Jan. 25, 2013]

Title 45 published on 12-Aug-2017 03:34

The following are ALL rules, proposed rules, and notices (chronologically) published in the Federal Register relating to 45 CFR Part 164 after this date.

  • 2016-01-06; vol. 81 # 3 - Wednesday, January 6, 2016
    1. 81 FR 382 - Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule and the National Instant Criminal Background Check System (NICS)
      GPO FDSys XML | Text
      Final rule.
      Effective date: This final rule is effective on February 5, 2016.
      45 CFR Part 164