What 45 CFR 164.404 - Notification to individuals. requires
This regulation requires covered entities to notify individuals whose unsecured protected health information has been breached without unreasonable delay and no later than 60 days after discovery, specifying the content and methods of notification.
Pillar: Medical & Healthcare · Authority: U.S. Department of Health and Human Services · Version: 1.0.0 · Last updated:
Primary source: https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-D/section-164.404
SHA-256 integrity: 83884b265774e3799ef493b68c198fe8e6f0d7d72a3c3f146fcebfe02339aeef
Primary Citations — 6 traced to source
- § 164.404(a): A covered entity shall, following the discovery of a breach of unsecured protected health information, notify each individual whose unsecured protected health information has been, or is reasonably believed by the covered entity to have been, accessed, acquired, used, or disclosed as a result of such breach.
- § 164.404(b): ...a covered entity shall provide the notification required by paragraph (a) of this section without unreasonable delay and in no case later than 60 calendar days after discovery of the breach.
+ 4 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/us-hipaa-45-cfr-164-404-breach-notification-covered-entities.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/us-hipaa-45-cfr-164-404-breach-notification-covered-entities.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/us-hipaa-45-cfr-164-404-breach-notification-covered-entities
- Back to registry: Browse all 10,090 compliance nodes