April 9, 2020

April 09, 2020

Subscribe to Latest Legal News and Analysis

April 08, 2020

Subscribe to Latest Legal News and Analysis

April 07, 2020

Subscribe to Latest Legal News and Analysis

Yearly Data Breach Reporting Due to OCR by February 29

Every year, we remind our readers that the HIPAA data breach notification regulations require covered entities to notify the Office for Civil Rights (OCR) of any reportable data breaches that involved fewer than 500 individuals and have not already been self-reported within 60 days following the calendar year. That means that covered entities are required to provide notification to the OCR of data breaches under 500 by February 29, 2020. So this deadline is not missed, many covered entities elect to provide notification to the OCR simultaneously with individual notice, no matter how many individuals are involved.

For those covered entities that wait until the end of the year to report smaller data breaches, now is the time to access the OCR website and report those incidents. The OCR self-reporting website can be accessed here.

Copyright © 2020 Robinson & Cole LLP. All rights reserved.

TRENDING LEGAL ANALYSIS


About this Author

Linn F. Freedman, Robinson Cole Law Firm, Cybersecurity and Litigation Law Attorney, Providence
Partner

Linn Freedman practices in data privacy and security law, cybersecurity, and complex litigation. She provides guidance on data privacy and cybersecurity compliance to a full range of public and private clients across all industries, such as construction, education, health care, insurance, manufacturing, real estate, utilities and critical infrastructure, marine, and charitable organizations. Linn is a member of the firm's Business Litigation Group and chairs its Data Privacy + Cybersecurity Team. She is also a member of the Financial Services Cyber-Compliance Team (CyFi ...

401-709-3353