(A) In general The term “breach” means the unauthorized acquisition, access, use, or disclosure of protected health information which compromises the security or privacy of such information, except where an unauthorized person to whom such information is disclosed would not reasonably have been able to retain such information.


42 USC § 17921(1)(A)

Scoping language

In this subchapter
Is this correct? or