Skip to main content
Breach Notifications is an Administrator-only tab found under Settings → Breach Notifications. It helps your facility track potential protected health information (PHI) breaches and meet the HIPAA Breach Notification Rule (45 CFR § 164.400–414).
Track every potential breach here — even if your risk assessment later concludes no notification is required. The record demonstrates due diligence.

​
The 60-day rule

Under HIPAA § 164.404, when a breach is discovered, covered entities must notify:
  • Affected individuals — without unreasonable delay, and no later than 60 days after discovery
  • HHS — within 60 days (or annually for breaches affecting fewer than 500 individuals)
ImaraCare calculates the deadline automatically from the discovery date you enter.

​
Record a breach incident

1

Open Breach Notifications

Go to Settings → Breach Notifications.
2

Click New Incident

Click the New Incident button in the top right.
3

Fill in the form

Complete the required fields — see the table below.
4

Save

The 60-day notification deadline is set automatically from the discovery date.

​
Incident fields

​
Status meanings

​
Deadline badges

Each open incident shows a countdown badge next to the status:
  • Overdue — 60-day window has passed
  • N days left — deadline is within 14 days (red) or more than 14 days (grey)
  • No badge shown when status is HHS Notified or Closed
ImaraCare tracks deadlines and statuses but does not submit notifications to HHS on your behalf. Use the HHS Breach Portal for official reporting.
See also HIPAA compliance for the full picture of HIPAA obligations in ImaraCare.