HIPAA Breach Notification
Explains what to do if client information is lost, stolen, or sent to the wrong person: tell the office at once, so the Agency can assess the incident and notify every person, agency, and outlet the law requires, within the deadlines federal and Texas law set.
About this policy
- Policy number
- TX-PRV-03
- Version
- 1.0
- Main rule
- 45 CFR §§164.400-164.414
- Library
- Texas home care · 46 policies
- Category
- Privacy
- Sections
- 19
In short
- If a client's information is lost, stolen, or sent to the wrong person, tell the office at once.
- Report it the same day, even if you're not sure anything went wrong.
- Sample Home Care Agency, LLC decides who the law says must be told. That decision isn't yours to make.
- Never try to fix it yourself, and never stay quiet hoping it wasn't serious.
What's inside
19 sections. The full text comes with the One-time Policy Pack.
- Terms of Reference
- 1. Purpose
- 2. Scope
- 3. Definitions
- 4. Policy Statement (45 CFR §§164.400-164.414)
- 5. Risk Assessment
- 6. Federal Notification Requirements
- 7. Content and Method of Notice to Individuals
- 8. Texas Notification Requirements
- 9. Notice Method, Business Associates, and Law Enforcement Delay
- 10. Procedure
- 11. Responsibilities
- 11.1 Staff Training
- 12. Records and Documentation
- 12.1 Compliance Monitoring
- 13. References
- 14. Related Policies and Forms
- 15. Approval
- 16. Revision History
An inspector may ask
- Ask an attendant: a client’s paperwork fell out of your bag at the grocery store. What do you do?
- Show me the risk assessment for your most recent reportable incident, or your log showing you have had none.
See Cura Core with your agency's name on it.
Choose your state and type of agency, buy your Policy Pack online and get your sign-in by email. Already a customer? Sign in to your portal.