Following a breach of phi whose responsibility is it to notify the affected individuals

Following a breach of unsecured protected health information, covered entities must provide notification of the breach to affected individuals, the Secretary, and, in certain circumstances, to the media. In addition, business associates must notify covered entities if a breach occurs at or by the business associate.

phat

answer; the above statement is (true);