Breach notification policies and procedures should cover everything from the definition of a data breach to how affected individuals, the Office for Civil Rights, and the media will be notified. One of the most important policies in this area should be how members of the workforce notify a breach to their supervisors in order that the Covered Entity or Business Associate can mitigate the impact of the breach as quickly and as effectively as possible.