When a HIPAA breach of more than 500 records has occured, media notification, part of the new breach notification rule in the HITECH Act, is required.