Breach notification exceptions are provided to all, EXCEPT:

Breach notification exceptions are provided to all, EXCEPT:
A . Business associates who access information by good faith, unintentional means and do not further disclose information
B. Unintentional, good faith access by employees of covered entities if the information was not further disclosed
C. If the information impacted less than 500 people within a single demographic area
D. Inadvertent disclosure made individual to individual within a covered entity who is authorized to access protected health information

View Answer

Answer: C

Explanation:

Information impacting less than 500 individuals, regardless of their demographic area, is regarded as a breach unless one of the other three qualifiers is met.