HIPAA Breach Notification Policy

In the event of a breach of unsecured protected health information, Platform Health will:

• Notify affected individuals without unreasonable delay and no later than 60 days following discovery.
• Notify the Secretary of Health and Human Services as required by HIPAA's Breach Notification Rule.
• Notify the media if the breach affects more than 500 residents of a state or jurisdiction.

Notifications will include:

• A description of the breach
• The types of information involved
• Steps individuals should take to protect themselves
• What we are doing to investigate and mitigate
• Contact information for further questions

Version 1.0.0 · Effective 2026-09-15