Breach response

60-day notification tracker

Record a breach of unsecured PHI and see your individual, HHS, and media deadlines computed from the discovery date. The pre-filled letter template merges your summary through the email-module templates seam.

This page is private — never indexed. Per-row read/write is owner-scoped.

Step 1

Record the breach

Three fields and a 2000-character cap. Do not include PHI in the summary — this intake stays private to your account.

The day the breach was identified, not the day it occurred.

Triggers HHS and prominent-media notice when 500 or more.

0/2000 characters — keep it free of names, dates of birth, and clinical detail.

Checking your session…

Step 2

Notification deadlines

Computed from the discovery date (45 CFR §164.404 / §164.408). State-level deadlines apply in parallel — surface them through counsel.

Add a discovery date to see the 60-day deadline.

Step 3

Pre-filled notification letter

Server-held template (the email-module templates seam) merged with the most recent intake. Submit to refresh; the preview always reflects the values on file.

Sign in to record an intake, and the preview will appear here.