Under HIPAA, when must a breach be notified?

• A. If a breach of unsecured protected health information occurs, covered entities must notify affected individuals and sometimes the media or government authorities.
• B. Breaches must be reported only to the patient’s family.
• C. Breaches require no notification if the information was accidentally disclosed.
• D. Notification is required only in the event of a data loss of more than 100 records.

Answer: (A)