45 CFR § 164.402 - Definitions (Breach Notification)

Publisher

Legal Information Institute (Cornell Law School), reproducing the eCFR

URL

https://www.law.cornell.edu/cfr/text/45/164.402

Published

unknown

Updated

unknown

Accessed

2026-10-01

HTTP status

200

License

US federal regulation text is public domain; public-domain regulatory text; short excerpts and locators only

Source notes citing this source

• An impermissible acquisition access use or disclosure of PHI is presumed to be a breach unless the covered entity or business associate demonstrates a low probability of compromise based on a risk assessment of at least the listed factors. in context
• Unsecured PHI is PHI not rendered unusable unreadable or indecipherable to unauthorized persons through a technology or methodology specified in HHS guidance under HITECH section 13402(h)(2). in context

Cite this source record

APA

WarmTransfer. (2026, October 1). 45 CFR § 164.402 - Definitions (Breach Notification). WarmTransfer. https://warmtransfer.net/knowledge/sources/cornell-lii-45-cfr-164-402

BibTeX

@misc{warmtransfer-cornell-lii-45-cfr-164-402,
  title  = {45 CFR § 164.402 - Definitions (Breach Notification)},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/sources/cornell-lii-45-cfr-164-402},
  note   = {Legal Information Institute (Cornell Law School), reproducing the eCFR, accessed 2026-10-01}
}