Do I Have to Report This as a Breach?

One of the most common questions I get is whether a particular disclosure constitutes a breach that requires notification to the individual and completing a breach notification report with the Office for Civil Rights. No one likes to “fess up” that their organization has had a breach; consequently I see organizations doing some pretty interesting…