breach-notification

HIPAA Breach Notification Rule

Primary-source orientation to the federal breach notification framework.

Current requirement Identifier 45-CFR-164-SUBPART-D Version 1.0

The Breach Notification Rule is codified at 45 CFR Part 164, Subpart D. It describes notification duties for certain breaches of unsecured protected health information.

Do not infer a reporting deadline or notification decision from this summary. Preserve the facts, consult the regulation and official guidance, and involve qualified privacy or legal professionals for an incident-specific determination.

Authority and source

Authority: Primary source
Citation: HIPAA Breach Notification Rule
Publisher: U.S. Department of Health and Human Services
Source identifier: HHS-BREACH-NOTIFICATION
Source status: verified

Open primary source

Change and publication history

Initial reviewed publication — Sep 5, 2026