Health Information Management

OCR will post names of 'individuals' who report breaches affecting 500 or more

HIM-HIPAA Insider, April 26, 2010

A spokesperson for the Office for Civil Rights (OCR) confirmed in an e-mail to the HIPAA Update blog April 16 that it can begin posting on its breach notification Web site the names of entities it considers “individuals” regardless of whether those entities give consent.

Currently, OCR does not post the names of such entities (namely sole practitioners) who report breaches affecting 500 or more individuals if they do not give OCR consent; OCR treats them as protected “individuals” per the Privacy Act of 1974. Instead, OCR lists them as “private practice.”

Read the full story on HIPAA Update.

Most Popular