A vendor of personal health records or PHR related entity that discovers a breach of security shall provide notice of such breach to an individual promptly, as described in § 318.4 (regarding timeliness of notification), and in the following form:
Get notified when this obligation is modified in proposed, final, or codified rules.
bdf03f837dae98e9