OpenControls Logo

STIG Viewer

STIGViewer Support
US Cybersecurity Documents/HIPAA Security Rule (45 CFR 164)/164.404

164.404(c)(1)(B)

paragraph (action item)

A description of the types of unsecured protected health information that were involved in the breach (such as whether full name, social security number, date of birth, home address, account number, diagnosis, disability code, or other types of information were involved);

164.404 Notification to individuals.

Related Frameworks

1 mapping across 3 frameworks
SCF1 mapping
IRO-04.1Data Breach
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (13) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CP-1Policy and Procedures
1.00
IR-1Policy and Procedures
1.00
IR-4Incident Handling
1.00
IR-4(15)Public Relations and Reputation Repair
1.00
IR-6Incident Reporting
1.00
IR-7Incident Response Assistance
1.00
IR-8Incident Response Plan
1.00
IR-8(1)Breaches
1.00
SA-4Acquisition Process
1.00
SA-9External System Services
1.00

+3 more (top 10 by confidence shown)

CCI0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (3) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CCI-004160
1.00
CCI-004161
1.00
CCI-004162
1.00

Department of Health and Human Services, HIPAA Security and Privacy Rules (45 CFR Part 164). Edition dated 2026-01-01. Read the publication.