A dental practice administrator discovers a data breach in which patient electronic health records were accessed by an unauthorized individual. Under HIPAA's Breach Notification Rule, when must affected individuals be notified?
- AWithin 24 hours of discovery
- BWithin 60 days of discovering the breach
- CWithin 6 months of discovering the breach
- DOnly if more than 500 patients are affected