Covered entities must submit annual report to the OCR by March 1, 2015 for breaches affecting fewer than 500 individuals. Breach notification obligations differ depending on whether the breach affects 500 or more individuals or fewer than 500 individuals. A covered entity must submit its annual notification to the Office for Civil Rights (OCR) if…