The Final Interim Regulations for HIPAA Breach Notification will be effective September 23, 2009 (30 days from the August 24, 2009 date of publication in the Federal Register). Covered entities should begin immediately to prepare in this short period to be ready to comply with the new rules; however, HHS announced that it will refrain from imposing sanctions for failure to make such notifications until 180 days from publication of the new rules (i.e., until February 22, 2010). These regulations are the first of several that HHS is required to issue over the next few months under the American Recovery and Reinvestment Act. Will your organization and your Business Associates be in compliance?