Health Information Management

OCR will post names of 'individuals' who report breaches affecting 500 or more

HIPAA Weekly Advisor, April 26, 2010

Want to receive articles like this one in your inbox? Subscribe to HIPAA Weekly Advisor!

A spokesperson for the Office for Civil Rights (OCR) confirmed in an e-mail to the HIPAA Update blog April 16 that it can begin posting on its breach notification Web site the names of entities it considers “individuals” regardless of whether those entities give consent.

Currently, OCR does not post the names of such entities (namely sole practitioners) who report breaches affecting 500 or more individuals if they do not give OCR consent; OCR treats them as protected “individuals” per the Privacy Act of 1974. Instead, OCR lists them as “private practice.”

Read the full story on HIPAA Update.



Want to receive articles like this one in your inbox? Subscribe to HIPAA Weekly Advisor!

Most Popular

Related Articles