The Breach Notification Rule is a federal regulation under the Health Insurance Portability and Accountability Act (HIPAA). It mandates that healthcare organizations, including nursing facilities, must notify affected individuals, the Department of Health and Human Services (HHS), and in some cases, the media, when there is a breach of unsecured protected health information (PHI).
