With Elizabeth Scarola
If a breach affecting 500 or more individuals occurs, the covered entity or business associate must report the breach to OCR as soon as possible...