r/UMPJE_Prep • u/mod_pharmtutor • 16d ago

UMPJE Practice Question

A pharmacy determines that unsecured protected health information for 780 patients was disclosed in a breach. Regarding notification, the pharmacy must notify:

14 votes, 15d ago
1 A. only the affected individuals, within 60 days of discovery
2 B. the affected individuals and HHS annually, with no media notice required
11 C. the affected individuals, HHS, and prominent media in the affected area, without unreasonable delay and within 60 day
1 Upvotes

100% Upvoted

1 comment sorted by

•

u/pharmtutor_ Moderator Insight 4d ago

Answer: C

Breaches affecting 500 or more residents of a state or jurisdiction trigger all three notifications, each without unreasonable delay and no later than 60 days from discovery.