Unnecessary Delays in Patient Notification Constitutes Violation of HIPAA Breach Notification Rule

HIPAA Breach Notification Rule (45 CFR Secs. 164.400-414) requires timely notification of any reportable breach to HHS’ Office of Civil Rights and sending notification letters to affected individuals without unreasonable delay and no later than 60 days after discovery of the breach.