HIPAA notification determination

Notify Covered Entity — Affected Individuals: 500 · Available affected-person and notice information…

The calculated result is “Notify Covered Entity”. Complete “Contact procedures for questions or more information”.

Decision path6207AA2425Schema 1.0.0
Entered facts6
HIPAA roleBusiness Associate
There was an impermissible use or disclosure of PHIYes
The PHI was unsecuredYes
A documented four-factor assessment found a low probability of compromiseNo
Number of affected individuals500
Covered entity notified by the business associateNo
Action required
Calculated result

Notify Covered Entity

Apply the published HIPAA Breach Notification Rule to the PHI, compromise assessment, entity role, affected-person count, media threshold, and notice status entered here. This scenario is distinct because it produces this exact combination of calculated result, active obligations, deadlines, and required evidence.

Published by ProseIDVersion 1.0.0
Rules activated2
Required

Complete “Contact procedures for questions or more information”

Complete “Contact procedures for questions or more information”.

45 CFR §§ 164.402, 164.404(c)
Required

Notify the covered entity and provide the available affected-person and notice…

Notify the covered entity and provide the available affected-person and notice information.

45 CFR § 164.410

Change the facts

A nearby path produces a different result.

HIPAA roleBusiness Associate → Covered Entity

Number of affected individuals500 → 499

Result becomesNotify Individuals And Log For Annual HHS Report

Inspect the changed path →

Published legal basis

Sources carried by this schema release.

The calculated path is bound to the cited version and sources. It is general information, not a substitute for advice on facts or law outside the schema.

Use your facts

Run the actual workflow.

This page shows one calculated path. Open the maintained workflow to answer with your own facts and, when needed, create a version-bound audit record.