A breach of HIPAA or HIPAA violation occurs when any component of the HIPAA standards and restrictions listed in 45 CFR Parts 160, 162, and 164 is not met. Immediate n The HIPAA Breach Notification Rule 45 CFR 164. Notification of a HIPAA breach may assist the organization avoid penalties and legal consequences. To avoid accidental HIPAA violation, medical billing agencies, medical chart review outsourcing companies, attorneys, revenue cycle management firms, etc. A data breach by a firm does not always imply a HIPAA violation.