Whatever the method, a breach notice includes, to the extent possible, a brief description of what happened with the dates of the breach and of its discovery, the types of unsecured protected health information involved (name, Social Security number, date of birth, address, account number, diagnosis codes), the steps individuals should take to protect themselves, what the entity is doing to investigate, mitigate and prevent recurrence, and contact procedures including a toll-free number, email address, website or postal address.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.