Get Breach Portal - Us Department Of Health & Human Services - Office...

Should you need assistance with this site or have any questions, please email ocrprivacy@hhs.gov or call us toll-free: (800) 368-1019, TDD toll-free: (800) 537-7697. To file a breach report, please enter information in the wizard pages below. A field with an asterisk (*) before it is a required field.

Definition of Breach A breach is, generally, an impermissible use or disclosure under the Privacy Rule that compromises the security or privacy of the protected health information.

This publication provides general guidance for an organization that has experienced a data breach. If you'd like more individualized guidance, you may contact the FTC at 1-877-ID-THEFT (877-438-4338).

There are 3 exceptions: 1) unintentional acquisition, access, or use of PHI in good faith, 2) inadvertent disclosure to an authorized person at the same organization, 3) the receiver is unable to retain the PHI. @

Under HIPAA's HITECH Act, the Secretary for the U.S. Health and Human Services ( HHS) must post a list of data breaches that affect 500 or more individuals. Officials and covered entities (CEs) commonly call this list the Wall of Shame. Its official name is the Breach Notification Portal.

Report all cyber-related incidents involving the actual or suspected breach/compromise of PII within one hour of discovery to the United States Computer Emergency Readiness Team (US-CERT) by completing and submitting the US-CERT report at https://.us-cert.gov/forms/report.

First, when must a breach be reported? To avoid a fine from the OCR, healthcare providers must send notifications to affected individuals within 60 days of discovery of the breach.

You must report a notifiable breach to the ICO without undue delay, but not later than 72 hours after becoming aware of it.