Secure Break Notification For Free

The first priority is to stay calm and act quickly. Contain the breach by disconnecting affected devices from the network and notifying your IT department. Assess the damage by determining what data has been compromised and what actions must be taken.

Notify the Privacy Commissioner and affected individuals of the eligible data breach.

HIPAA's Breach Notification Rule requires covered entities to notify patients when their unsecured protected heath information (PHI) is impermissibly used or disclosed?or ?breached,??in a way that compromises the privacy and security of the PHI.

These individual notifications must be provided without unreasonable delay and in no case later than 60 days following the discovery of a breach and must include, to the extent possible, a brief description of the breach, a description of the types of information that were involved in the breach, the steps affected ...

How long organizations have to disclose the breach: All affected individuals and the media (if applicable) must be notified without unreasonable delay but within 60 days of discovery of the breach. If fewer than 500 individuals were affected, the FTC must be notified within 60 days after the end of the calendar year.

All 50 states, the District of Columbia, Guam, Puerto Rico and the Virgin Islands have security breach notification laws that require businesses or governments to notify consumers or citizens if their personal information is breached. Lawmakers continue to review existing laws, however.

Many credit agencies now also offer data breach monitors on a free or paid plan basis. If a set of credentials belonging to you are found in a new data leak, these organizations will tell you -- allowing you to take action quickly.