AhaBulbStuff Everyone Should Know
AhaBulb: Stuff Everyone Should Know · ahabulb.com/hipaa-business-associate-breach

Who must notify patients if a business associate has a breach?

Start playing free

  1. The covered entity, after the business associate tells it
  2. Only HHS notifies the patients
  3. The patients' insurance companies

🔒 The answer is for AhaBulb members. Members see the answer, why it's right and the official sources for every card of Stuff Every Healthcare Worker Should Know, plus timed practice exams.

The first 50 cards of every test are free to play.

Play the free cards See membership

Like this card?
Play the game

References

  1. 45 CFR 164.410 (eCFR) www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-D/section-164.410 Checked 2026-10-10.
  2. HHS Breach Notification Rule www.hhs.gov/hipaa/for-professionals/breach-notification/index.html Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Healthcare Privacy (HIPAA)Who must comply with the HIPAA Security Rule?Healthcare Privacy (HIPAA)When is a breach considered discovered?Healthcare Privacy (HIPAA)When is substitute notice used for breach notification?

That's stuff everyone should know.