An organization discovers a vendor's software breach exposed 600 patient records. Under HIPAA's Breach Notification Rule, notification to affected individuals must occur within:
-
A
30 days of discovery
-
B
60 days of discovery
-
C
90 days of discovery
-
D
180 days of discovery