Analyze legal concepts and principles to the practice of HIM.
A hacker has penetrated the network of the business associate who provides cloud-based storage for the hospital. All patient records within the last two months were compromised. As HIM Director, you have been tasked with organizing a response to this breach. Differentiate the steps related to breach notification.