The U.S. Department of Health and Human Services (HHS) has published web-based forms for hospitals to use to report breaches of patient privacy.
The forms and instructions are available on the HHS website at www.hhs.gov/ocr/privacy/hipaa/administrative/breachnotificationrule/brinstruction.html.
As a reminder, effective Sept. 23, 2009, hospitals must notify HHS of breaches of privacy of unsecured protected health information.
To help member hospitals understand and comply with the increasingly complex federal and state laws regulating the privacy of health information, including breaches, CHA has published the California Health Information Privacy Manual.
To order the manual, visit the Publications webpage. Several useful privacy documents, including the regulation text, model forms and patient notices, also are posted.