Feb 24, 2010

For breaches of less than 500 that occurred between Sept 29 - Dec 31, 2009 are due to be reported by March 1 See link (more) for details

Additional links:

http://www.hhs.gov/ocr/privacy/hipaa/administrative/breachnotificationrule/brinstruction.html