{"ref":"GA-HSP-PRV-03","title":"Breach Notification","category":"Privacy","summary":"Explains what happens when patient information is lost, stolen, sent to the wrong person or seen by someone who should not see it: staff report it the same day, the Privacy Official assesses it, and the Agency notifies every affected individual, the U.S. Department of Health and Human Services and, for large breaches, the media, within the HIPAA time limits. It also explains how the Georgia breach statute relates to a private hospice.","inShort":["If patient information is lost, stolen, misdirected or overheard, tell the Privacy Official the same day.","Report even if you are not sure. Deciding is the Privacy Official’s job.","Help get the information back: ask the wrong recipient to return or destroy it.","Patients must be told within 60 days of discovery at the latest, so every hour counts.","Write down what happened, when, and who was involved."],"primaryCitation":"45 CFR Part 164 Subpart D","citations":["O.C.G.A. §10-1-910 et seq.","O.C.G.A. §10-1-911","O.C.G.A. §10-1-912","Ga. Comp. R. & Regs. 111-8-37-.10(1)(m)"],"federalCitations":["45 CFR §§164.400-164.414","45 CFR §164.402","45 CFR §164.404","45 CFR §164.406","45 CFR §164.408","45 CFR §164.410","45 CFR §164.412","45 CFR §164.414","45 CFR §164.530(f)"],"surveyorAsks":["A nurse’s bag with a visit sheet is stolen from her car. Walk me through what happens next.","Show me the risk assessment for your most recent incident, or your log showing you had none."],"forms":[],"headings":["Terms of Reference","1. Purpose","2. Scope","3. Definitions","4. Policy Statement (45 CFR §§164.400-164.414)","5. Risk Assessment","6. Federal Notices","6.1 Content and method of notice to individuals","7. Georgia Breach Statute","8. Business Associates and Law Enforcement Delay","9. Procedure","10. Responsibilities","11. Records and Compliance Monitoring","12. Staff Training","13. References","14. Related Policies and Forms","15. Approval","16. Revision History"],"version":"1.0","sample":false,"pack":"ga-hospice","state":"Georgia","service":"Hospice","guides":[{"path":"/guides/hospice-policies/","h1":"What policies are required for hospice?"},{"path":"/guides/hospice-conditions-of-participation/","h1":"Hospice Conditions of Participation: which policies each one needs"}],"agency":{"name":"Sample Agency","legalName":"Sample Agency, LLC","logo":null}}