Breach Notification Rule The HIPAA Breach Notification Rule requires healthcare providers and certain health plans to notify the U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR), of breaches of unsecured protected health information (PHI) affecting fewer than 500 individuals within 60 days of the end of the calendar year in… Read more