Under HIPAA, a business associate is treated as knowing about a breach when its employee or agent knows, so your offshore technician's discovery can start a clock before you hear about it. This guide compares the US, Australian, Canadian, and Philippine notification rules and shows how to build an internal reporting standard that fits them.