| Keyword | CPC | PCC | Volume | Score | Length of keyword |
|---|---|---|---|---|---|
| data breach notification period | 1.31 | 0.7 | 4779 | 50 | 31 |
| data | 0.75 | 0.2 | 6616 | 13 | 4 |
| breach | 0.4 | 0.5 | 4830 | 57 | 6 |
| notification | 0.22 | 0.5 | 8260 | 56 | 12 |
| period | 1.45 | 0.2 | 5810 | 94 | 6 |
When must a breach be reported to US Computer Emergency Readiness Team? Report all cyber-related incidents involving the actual or suspected breach/compromise of PII within one hour of discovery to the United States Computer Emergency Readiness Team (US-CERT) by completing and submitting the US-CERT report at https://www.us-cert.gov/forms/report.
When is a breach notification not required?Thus, with respect to an impermissible use or disclosure, a covered entity (or business associate) should maintain documentation that all required notifications were made, or, alternatively, documentation to demonstrate that notification was not required: (1) its risk assessment demonstrating a low probability that the protected health information has been compromised by the impermissible use or disclosure; or (2) the application of any other exceptions to the definition of “breach.”
