A covered entity mails breach notification letters to affected individuals but the letters are returned as undeliverable for 50 individuals. What is the required substitute notice method?
-
A
Post a notice on the covered entity's website for 90 days
-
B
Notify HHS, which will contact individuals on the entity's behalf
-
C
Call each individual at their last known phone number
-
D
Email individuals using their last known email address