Breaches involving less than 500 individuals
For breaches of unsecured protected health information involving less than 500 individuals, a home health agency must maintain a log or other documentation of these breaches. The agency must also provide notification of breaches to the Secretary of HHS by March 1, 2013. (no later than 60 days after the end of the calendar year)
This notice must be submitted electronically (Instructions for Submitting Notice) and all information must be completed on the Breach Notification Form. A separate form must be completed for every breach that has occurred during the calendar year.
For specifics of the federal regulation see Notification in the Case of Breach of Unsecured Protected Health Information
Return to www.thinkhomecare.org
Think Home Care Blog 