Unfortunately data breaches are accelerating, and even the most careful organizations are not immune. When a data breach occurs, laws in all 50 states, the District of Columbia, Guam, Puerto Rico, and the U.S. Virgin Islands require organizations to make prompt notifications. A federal law, HIPAA, requires healthcare organizations to notify affected patients of breaches of their health information, and the Federal Trade Commission (FTC) enforces the Health Breach Notification Rule that applies to organizations not covered by HIPAA.

SunDance is fully equipped to efficiently and effectively provide all mailed breach notifications in accordance with U.S. laws. We maintain a SOC II Type 2 security certification and our facility is HIPAA compliant. We work directly with organizations and legal counsel to prepare, send, and document each notification.

SunDance breach notification services include

• Secure intake and handling of breach notification information
• Controlled processes designed for sensitive and regulated communications
• Variable data letter/insert production
• High-speed intelligent inserting
• Address standardization and postal optimization
• First Class and Certified Mail options
• USPS tracking and reporting
• Documentation to support audit and legal compliance proof

We hope you never have the need to notify individuals of a data breach! However, because cybersecurity experts warn that data breaches are a matter of when rather than if, rest assured that SunDance can securely and efficiently handle volume mailing to comply with all data breach notification laws.

Contact us today to supplement your data breach contingency planning.

Paul R. Hales of the Hales Law Group assisted with this information.