Health Information Compliance Alert

Industry News:

Don’t Forget to Report 2021 Small Breaches to OCR By March 1

If your practice experienced a small breach last year, the clock is winding down on alerting the HHS Office for Civil Rights (OCR).

Reminder: “If a breach of unsecured protected health information affects fewer than 500 individuals, a covered entity must notify the Secretary of the breach within 60 days of the end of the calendar year in which the breach was discovered,” OCR reminds in its HIPAA Breach Notification Rule guidance. And that day is March 1, 2022 for small breaches that occurred in 2021.

You can submit breaches through the OCR portal at You can submit breaches through the OCR portal at https://ocrportal.hhs.gov/ocr/breach/wizard_breach.jsf?faces-redirect=true.

 

Other Articles in this issue of

Health Information Compliance Alert

View All