HIPAA Breaches Must be Reported to Secretary of HHS by March 1, 2013

Breaches involving less than 500 individuals

For breaches of unsecured protected health information involving less than 500 individuals, a home health agency must maintain a log or other documentation of these breaches. The agency must also provide notification of breaches to the Secretary of HHS by March 1, 2013. (no later than 60 days after the end of the calendar year)

This notice must be submitted electronically (Instructions for Submitting Notice)  and all information must be completed on the Breach Notification Form. A separate form must be completed for every breach that has occurred during the calendar year.

For specifics of the federal regulation see Notification in the Case of Breach of Unsecured Protected Health Information

Return to www.thinkhomecare.org

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

%d bloggers like this: