What is the deadline for reporting breaches affecting 500 or more individuals?

The correct deadline for reporting breaches affecting 500 or more individuals is 60 days from the discovery of the breach. This requirement is part of the Health Insurance Portability and Accountability Act (HIPAA), which mandates that covered entities must notify the affected individuals, prominent media outlets, and the Department of Health and Human Services (HHS) within this timeframe. The 60-day period is critical to ensuring that breaches are addressed swiftly, enabling affected individuals to take necessary precautions in a timely manner. Adhering to this timeline is essential for compliance and maintaining the trust of individuals whose information may have been compromised.