Ready-to-run compliance workflow

HIPAA breach-notification determination

Documents the threshold assessment for a suspected breach of unsecured protected health information and records the individual, HHS, media, or covered-entity notices that follow.

Add to my workspace

Testing is free and does not create a Record. Unfinished live attempts are not charged.

What it does

From facts to a reviewable result.

This workflow uses the published release shown above. Later updates cannot silently change the reasoning attached to a completed Record.

Information it collects

Largest number affected in one state or jurisdiction
Breach affecting fewer than 500 logged for the annual HHS submission
Under-500 breach reported to HHS within 60 days after the calendar year ended
Applicable 60-day notices sent on time
A documented four-factor assessment found a low probability of compromise
The applicable 60-day notice deadline has been reached
Covered entity notified by the business associate
Mitigation and steps individuals should take

Plus 13 further items when relevant.

Results it calculates

Notification track

Choose the experience

Use the same rules in the format the work needs.

Form

Collect the complete set of relevant facts in one responsive document.

Guided assessment

Guide someone one relevant question at a time through the published logic.

Determination

Apply the rules to the facts and present the calculated outcome clearly.

Compliance checklist

Review the required controls and retain evidence of the completed check.

Published legal basis

The sources stay with the release.

HIPAA Breach Notification Rule

45 CFR §§ 164.400–414

Official source ↗

Inspect the publisher, full schema record, release history, and field structure before relying on this interpretation for your own circumstances.

Use this release

Test the workflow now.
Put it to work when it fits.

Create a Flow