CHA News

HHS Publishes Breach Reporting Forms

Effective Sept. 23, hospitals must notify HHS of breaches of privacy of unsecured protected health information.

This post has been archived and contains information that may be out of date.

The U.S. Department of Health and Human Services (HHS) has published web-based forms for hospitals to use to report breaches of patient privacy.

The forms and instructions are available on the HHS website at www.hhs.gov/ocr/privacy/hipaa/administrative/breachnotificationrule/brinstruction.html.

As a reminder, effective Sept. 23, 2009, hospitals must notify HHS of breaches of privacy of unsecured protected health information. 

To help member hospitals understand and comply with the increasingly complex federal and state laws regulating the privacy of health information, including breaches, CHA has published the California Health Information Privacy Manual.

To order the manual, visit the Publications webpage. Several useful privacy documents, including the regulation text, model forms and patient notices, also are posted.