https://www.lifars.com/2018/04/us-health-department-outlines-breach-notification-guidelines/