Toolkit: To Notify Or Not To Notify — That Is The Question

Why This Topic Matters

Breach notification decisions affect privacy compliance, internal documentation, and required notifications to affected individuals and government agencies. This article helps readers understand the overall framework used to sort incidents into non-breaches, non-reportable breaches, and reportable breaches.

Article Sections

1. Decision tree for breach reporting

   An overview of the step-by-step framework used to evaluate potential PHI incidents under HIPAA breach notification guidance.

2. Risk assessment and reporting timelines

   General discussion of how breach risk is evaluated and the broad notification timing categories referenced for smaller and larger breaches.

3. HHS OCR resource

   A reference to the federal resource provided for additional breach-notification information.