HITECH Data Breach Reporting Deadline Approaches

It’s time for mandatory data breach reporting to the Office of Civil Rights (“OCR”) under The Health Information Technology for Economic and Clinical Health Act (“HITECH”) and the interim/final breach notification rules.  Yes, it’s February – time for Valentines, cold and snow (in the Northeast anyway), but most importantly, HITECH requires regulated entities (“covered entities”) to report smaller-scale data breaches (those affecting fewer than 500 individuals) to OCR.  These breach reports are due within 60 days following the end of the calendar year in which the breach occurred.   So, covered entities that experienced a breach or breaches involving fewer than 500 individuals in 2011 should make any required reports to OCR by the end of February.  If you are a covered entity with HITECH reporting obligations, the following resources may be helpful: 

*Instructions for notifying OCR of breaches affecting fewer than 500 individuals; and

*Form for submitting notice to OCR.

Even if you did not experience a reportable breach, it is helpful to review the notification form and to become familiar with the type of information that must be gathered and reported in the event of a data breach.  If you have questions about your reporting obligations, the reporting process or HIPAA compliance in general, contact Dianne Bourque, Daria Niewenhous, or the Mintz Levin attorney who generally assists you.

Please see full article below.

LOADING PDF: If there are any problems, click here to download the file.

Published In: Administrative Agency Updates, Civil Rights Updates, Health Updates, Privacy Updates

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© Mintz Levin - Health Law & Policy Matters | Attorney Advertising

Don't miss a thing! Build a custom news brief:

Read fresh new writing on compliance, cybersecurity, Dodd-Frank, whistleblowers, social media, hiring & firing, patent reform, the NLRB, Obamacare, the SEC…

…or whatever matters the most to you. Follow authors, firms, and topics on JD Supra.

Create your news brief now - it's free and easy »