If law enforcement asks for a written request to delay the notice for breach, how long can the delay be?

The law allows for a delay in providing notice of a breach of protected health information when law enforcement requests it to support an ongoing investigation. According to the regulations, the maximum duration for this delay can be 60 days. This is intended to balance the needs of law enforcement with the rights of individuals to be informed about breaches of their sensitive information.

Providing a notice within this period helps ensure that individuals can take necessary precautions to protect themselves if their information has been compromised. By allowing a maximum of 60 days, the regulations recognize the need for timely communication while also respecting the integrity of law enforcement inquiries.