The requirements of this subpart shall apply with respect to breaches of protected health information occurring on or after September 23, 2009.