"Breaches discovered by a covered entity in 2018 and involving fewer than 500 individuals must be submitted via OCR's website portal by March 1, 2019.... A separate report must be submitted for each breach that occurred during the 2018 calendar year. A copy of the completed form should be printed prior to and after submission and maintained in the covered entity's records to document the notification."  MORE >>