U.S. Department of Health and Human Services. Office for Civil Rights. Breach Portal: Notice to the Secretary of HHS Breach of Unsecured Protected Health Information. As required by section 13402 (e) (4) of the HITECH Act, the Secretary must post a list of breaches of unsecured protected health information affecting 500 or more individuals..