Breach notifications must contain all of the following except
A) a brief description of what happened.
B) a description of the damages awarded for ill consequences from the breach.
C) a description of the types of unsecured PHI involved.
D) a description of what the CE is doing to investigate the breach.

Question

Quizplus · Accepted Answer

Breach notifications are required to inform affected individuals about the incident, what information was involved, and what steps are being taken to investigate and mitigate the breach. They do not include information about damages awarded for ill consequences from the breach, as this would be determined through legal processes after the notification.

Breach Notifications Must Contain All of the Following Except