When your practice determines that a privacy breach is reportable, notification to patients must be provided within 60 calendar days from the date of discovery of the incident. The notice to patients must include: a brief description of the breach; the types of information that were involved; a brief description of what your practice is… Continue reading →