Under HIPAA, when notifying individuals that their protected health information has been breached, what information must be included?
a) Description of the breach, including the date of the breach and the date of its discovery.

b) Types of information involved in the breach (e.g., names, Social Security numbers, medical records).

c) Steps individuals should take to protect themselves from potential harm.

d) Contact procedures for individuals to ask questions or learn additional information about the breach.