The U.S. Department of Health & Human Services regulation requires healthcare providers, health plans, and other entities covered by the Health Insurance Portability and Accountability Act (HIPPA) to notify individuals when their health information is breached, according to the federal agency???s website.