Previously, providers had five days to report a breach. That now has been extended to 15 days.
More articles on data breaches:
Data breach: Laptops missing from Dallas ambulances
Alere data breach class suit dismissed
Navigating a data breach: Balancing legal and communications hurdles