This tutorial about administrative security safeguards is the twenty-fourth of 24 lessons. When a breach is discovered, HIPAA regulation ยง 164.404(b) requires covered entities (CEs) to notify affected individuals "no later than 60 days." California's Civil Code section 1798.82 requires notifications when "personal information" is breached. Each tutorial is narrated by Carol Mack, RN, attorney at law.