45 CFR 164.408 - Notification to the Secretary.

Status message

There is 1 rule appearing in the Federal Register for 45 CFR 164. View below or at eCFR (GPOAccess)
§ 164.408 Notification to the Secretary.
(a) Standard. A covered entity shall, following the discovery of a breach of unsecured protected health information as provided in § 164.404(a)(2), notify the Secretary.
(b) Implementation specifications: Breaches involving 500 or more individuals. For breaches of unsecured protected health information involving 500 or more individuals, a covered entity shall, except as provided in § 164.412, provide the notification required by paragraph (a) of this section contemporaneously with the notice required by § 164.404(a) and in the manner specified on the HHS Web site.
(c) Implementation specifications: Breaches involving less than 500 individuals. For breaches of unsecured protected health information involving less than 500 individuals, a covered entity shall maintain a log or other documentation of such breaches and, not later than 60 days after the end of each calendar year, provide the notification required by paragraph (a) of this section for breaches occurring during the preceding calendar year, in the manner specified on the HHS Web site.

Title 45 published on 2013-10-01

The following are only the Rules published in the Federal Register after the published date of Title 45.

For a complete list of all Rules, Proposed Rules, and Notices view the Rulemaking tab.

  • 2014-02-06; vol. 79 # 25 - Thursday, February 6, 2014
    1. 79 FR 7290 - CLIA Program and HIPAA Privacy Rule; Patients' Access to Test Reports
      GPO FDSys XML | Text
      DEPARTMENT OF HEALTH AND HUMAN SERVICES, Office of the Secretary, Centers for Medicare & Medicaid Services
      Final rule.
      Effective Date: These regulations are effective on April 7, 2014. HIPAA covered entities must comply with the applicable requirements of this final rule by October 6, 2014.
      42 CFR Part 493

Title 45 published on 2013-10-01

The following are ALL rules, proposed rules, and notices (chronologically) published in the Federal Register relating to 45 CFR 164 after this date.

  • 2014-02-06; vol. 79 # 25 - Thursday, February 6, 2014
    1. 79 FR 7290 - CLIA Program and HIPAA Privacy Rule; Patients' Access to Test Reports
      GPO FDSys XML | Text
      DEPARTMENT OF HEALTH AND HUMAN SERVICES, Office of the Secretary, Centers for Medicare & Medicaid Services
      Final rule.
      Effective Date: These regulations are effective on April 7, 2014. HIPAA covered entities must comply with the applicable requirements of this final rule by October 6, 2014.
      42 CFR Part 493