HIPAA notification determination
HIPAA breach-notification scenarios
Documents the threshold assessment for a suspected breach of unsecured protected health information and records the individual, HHS, media, or covered-entity notices that follow.
Published release1.0.038 distinct paths
Calculated result
1Document Assessment Only
Calculated result
6Notify Covered Entity
Action required
Notify Covered Entity — Number of affected individuals: 1,000 · What happened becomes required
HIPAA role: Business AssociateThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Covered Entity — Number of affected individuals: 500 · Available affected-person and notice information…
HIPAA role: Business AssociateThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Covered Entity — Number of affected individuals: 1 · Record the reason for any delay; completing this…
HIPAA role: Business AssociateThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Covered Entity — Number of affected individuals: 501 · Supply the covered entity with the affected-person…
HIPAA role: Business AssociateThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Covered Entity — Available affected-person and notice information… · Covered entity notified by the business associate…
HIPAA role: Business AssociateThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Covered Entity — Number of affected individuals: 60 · Supply the covered entity with the affected-person…
HIPAA role: Business AssociateThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Calculated result
16Notify Individuals And Log For Annual HHS Report
Action required
Notify Individuals And Log For Annual HHS Report — Number of affected individuals: 499 · What happened becomes required
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals And Log For Annual HHS Report — Number of affected individuals: 14 · Affected individuals notified becomes required
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals And Log For Annual HHS Report — Number of affected individuals: 8 · Under-500 breach reported to HHS within 60 days…
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals And Log For Annual HHS Report — Number of affected individuals: 2 · Record the reason for any delay; completing this…
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals And Log For Annual HHS Report — Number of affected individuals: 60 · Largest number affected in one state or…
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals And Log For Annual HHS Report — Number of affected individuals: 8 · Under-500 breach reported to HHS within 60 days…
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals And Log For Annual HHS Report — Number of affected individuals: 1 · Under-500 breach reported to HHS within 60 days…
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals And Log For Annual HHS Report — Number of affected individuals: 15 · Record the reason for any delay; completing this…
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals And Log For Annual HHS Report — Number of affected individuals: 15 · Largest number affected in one state or…
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals And Log For Annual HHS Report — Number of affected individuals: 24 · Largest number affected in one state or…
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals And Log For Annual HHS Report — Number of affected individuals: 2 · Largest number affected in one state or…
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals And Log For Annual HHS Report — Breach affecting fewer than 500 logged for the… · Number of affected individuals: 2
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals And Log For Annual HHS Report — Number of affected individuals: 50 · Largest number affected in one state or…
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals And Log For Annual HHS Report — Under-500 breach reported to HHS within 60 days… · Number of affected individuals: 8
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals And Log For Annual HHS Report — Number of affected individuals: 90 · Largest number affected in one state or…
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals And Log For Annual HHS Report — Largest number affected in one state or… · Number of affected individuals: 1
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Calculated result
15Notify Individuals HHS And Check Media
Action required
Notify Individuals HHS And Check Media — Number of affected individuals: 501 · What happened becomes required
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals HHS And Check Media — Number of affected individuals: 1,000 · Record the reason for any delay; completing this…
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals HHS And Check Media — Number of affected individuals: 1,000 · Affected individuals notified becomes required
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals HHS And Check Media — Number of affected individuals: 10,000,001 · HHS Secretary notified becomes required
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals HHS And Check Media — Largest number affected in one state or… · Number of affected individuals: 1,000
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals HHS And Check Media — Number of affected individuals: 10,000,000 · Record the reason for any delay; completing this…
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals HHS And Check Media — Number of affected individuals: 1,000 · Record the reason for any delay; completing this…
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals HHS And Check Media — Number of affected individuals: 10,000,001 · HHS Secretary notified becomes required
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals HHS And Check Media — Largest number affected in one state or… · Number of affected individuals: 10,000,001
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals HHS And Check Media — Number of affected individuals: 501 · Largest number affected in one state or…
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals HHS And Check Media — Largest number affected in one state or… · Number of affected individuals: 1,000
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals HHS And Check Media — Number of affected individuals: 10,000,001 · Record the reason for any delay; completing this…
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals HHS And Check Media — Largest number affected in one state or… · Number of affected individuals: 10,000,001
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals HHS And Check Media — Largest number affected in one state or… · Number of affected individuals: 10,000,001
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals HHS And Check Media — Largest number affected in one state or… · Number of affected individuals: 1,000
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes