If a Group Health Plan’s Business Associate Provides HIPAA Breach Notices, Must the Plan Also Send Notices?
QUESTION: A HIPAA business associate for our company’s group health plan experienced a breach of participants’ unsecured PHI and is preparing …