An electronic health record system used by a psychologist is breached, exposing 600 client records. Under HIPAA's Breach Notification Rule, the psychologist must notify:
-
A
Only the affected clients within 180 days
-
B
Affected clients, HHS, and prominent local media within 60 days
-
C
Only HHS within 30 days with no obligation to notify clients
-
D
The state licensing board within 24 hours