HIPAA notification determination
HIPAA breach-notification scenarios
Documents the threshold assessment for a suspected breach of unsecured protected health information and records the individual, HHS, media, or covered-entity notices that follow.
Published release1.0.038 distinct paths
Calculated result
1Document Assessment Only
Calculated result
6Notify Covered Entity
Action required
Notify Covered Entity — Affected Individuals: 1,000 · What happened becomes required
HIPAA role: Business AssociateThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Covered Entity — Affected Individuals: 500 · Available affected-person and notice information…
HIPAA role: Business AssociateThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Covered Entity — Affected Individuals: 1 · Record the reason for any delay; completing this…
HIPAA role: Business AssociateThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Covered Entity — Affected Individuals: 501 · Supply the covered entity with the affected-person…
HIPAA role: Business AssociateThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Covered Entity — Available affected-person and notice information… · Covered entity notified by the business associate…
HIPAA role: Business AssociateThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Covered Entity — Affected Individuals: 60 · Supply the covered entity with the affected-person…
HIPAA role: Business AssociateThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Calculated result
16Notify Individuals And Log For Annual HHS Report
Action required
Notify Individuals And Log For Annual HHS Report — Affected Individuals: 499 · What happened becomes required
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals And Log For Annual HHS Report — Affected Individuals: 14 · Affected individuals notified becomes required
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals And Log For Annual HHS Report — Affected Individuals: 8 · Small Breach HHS Reported By Annual Deadline: No
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals And Log For Annual HHS Report — Affected Individuals: 2 · Record the reason for any delay; completing this…
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals And Log For Annual HHS Report — Affected Individuals: 60 · Largest State Or Jurisdiction Resident Count:…
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals And Log For Annual HHS Report — Affected Individuals: 8 · Small Breach HHS Reported By Annual Deadline: No
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals And Log For Annual HHS Report — Affected Individuals: 1 · Small Breach HHS Reported By Annual Deadline: Yes
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals And Log For Annual HHS Report — Affected Individuals: 15 · Record the reason for any delay; completing this…
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals And Log For Annual HHS Report — Affected Individuals: 15 · Largest State Or Jurisdiction Resident Count:…
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals And Log For Annual HHS Report — Affected Individuals: 24 · Largest State Or Jurisdiction Resident Count: 1,000
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals And Log For Annual HHS Report — Affected Individuals: 2 · Largest State Or Jurisdiction Resident Count:…
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals And Log For Annual HHS Report — Small Breach Logged For HHS: Yes · Affected Individuals: 2
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals And Log For Annual HHS Report — Affected Individuals: 50 · Largest State Or Jurisdiction Resident Count:…
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals And Log For Annual HHS Report — Small Breach HHS Reported By Annual Deadline: Yes · Affected Individuals: 8
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals And Log For Annual HHS Report — Affected Individuals: 90 · Largest State Or Jurisdiction Resident Count: 1,000
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals And Log For Annual HHS Report — Largest State Or Jurisdiction Resident Count:… · Affected Individuals: 1
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Calculated result
15Notify Individuals HHS And Check Media
Action required
Notify Individuals HHS And Check Media — Affected Individuals: 501 · What happened becomes required
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals HHS And Check Media — Affected Individuals: 1,000 · Record the reason for any delay; completing this…
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals HHS And Check Media — Affected Individuals: 1,000 · Affected individuals notified becomes required
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals HHS And Check Media — Affected Individuals: 10,000,001 · HHS Secretary notified becomes required
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals HHS And Check Media — Largest State Or Jurisdiction Resident Count:… · Affected Individuals: 1,000
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals HHS And Check Media — Affected Individuals: 10,000,000 · Record the reason for any delay; completing this…
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals HHS And Check Media — Affected Individuals: 1,000 · Record the reason for any delay; completing this…
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals HHS And Check Media — Affected Individuals: 10,000,001 · HHS Secretary notified becomes required
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals HHS And Check Media — Largest State Or Jurisdiction Resident Count: 501 · Affected Individuals: 10,000,001
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals HHS And Check Media — Affected Individuals: 501 · Largest State Or Jurisdiction Resident Count:…
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals HHS And Check Media — Largest State Or Jurisdiction Resident Count:… · Affected Individuals: 1,000
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals HHS And Check Media — Affected Individuals: 10,000,001 · Record the reason for any delay; completing this…
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals HHS And Check Media — Largest State Or Jurisdiction Resident Count: 501 · Affected Individuals: 10,000,001
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals HHS And Check Media — Largest State Or Jurisdiction Resident Count:… · Affected Individuals: 10,000,001
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes
Action required
Notify Individuals HHS And Check Media — Largest State Or Jurisdiction Resident Count:… · Affected Individuals: 1,000
HIPAA role: Covered EntityThere was an impermissible use or disclosure of PHI: YesThe PHI was unsecured: Yes