AhaBulbStuff Everyone Should Know
AhaBulb: Stuff Everyone Should Know · ahabulb.com/hipaa-breaches-over-500

A breach affects more than 500 residents of one state. Who must be told besides the patients?

Start playing free

  1. HHS and prominent media outlets in that state
  2. Only the patients' insurance companies
  3. Only the local police department

🔒 The answer is for AhaBulb members. Members see the answer, why it's right and the official sources for every card of Stuff Every Healthcare Worker Should Know, plus timed practice exams.

The first 50 cards of every test are free to play.

Play the free cards See membership

Like this card?
Play the game

References

  1. 45 CFR 164.406 (eCFR) www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-D/section-164.406 Checked 2026-10-10.
  2. 45 CFR 164.408(b) (eCFR) www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-D/section-164.408 Checked 2026-10-10.
  3. HHS Breach Notification Rule www.hhs.gov/hipaa/for-professionals/breach-notification/index.html Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Healthcare Privacy (HIPAA)HIPAA requires a covered entity to disclose PHI in only two situations. Which pair?Healthcare Privacy (HIPAA)How are breaches affecting fewer than 500 people reported?Healthcare Privacy (HIPAA)Where do you file a HIPAA privacy complaint?

That's stuff everyone should know.