BREACH Misuse or loss of PHI is a breach and must be mitigated, along with notification to both the Secretary of the US DHHS and the client/patient If the loss or misuse affects more than 500 individuals, then the media must be notified 45 CFR 164.402, -404, -406, and -408 21
{}