Reports to Congress on Breach Notification Program

Section 13402(i) of the HITECH Act requires the Secretary of Health and Human Services (“the Secretary”) to prepare and submit to Congress an annual report containing the number and nature of breaches reported to the Secretary, and the actions taken in response to those breaches. Section 13424(2) of the HITECH Act requires the Secretary to make each report available to the public on the HHS website.

The following report was prepared to fulfill these statutory requirements. This report provides an overview of the breach notification requirements, as well as a discussion of the reports the Secretary received that occurred during the reporting period.

2022 Report to Congress on the Breach Notification Program

2021 Report to Congress on the Breach Notification Program

2020 Report to Congress on the Breach Notification Program

2019 Report to Congress on the Breach Notification Program *

2018 Report to Congress on the Breach Notification Program*

2015-2016-2017 Report to Congress on the Breach Notification Program - Submitted to Congress on February 22, 2019.

Submission Letters for the 2013 - 2014 Report to Congress on the Breach Notification Program

2013 - 2014 Report to Congress on the Breach Notification Program

Submission Letters for the 2011 - 2012 Report to Congress on the Breach Notification Program

2011 - 2012 Report to Congress on the Breach Notification Program

Submission Letters for the 2009 - 2010 Report to Congress on the Breach Notification Program

2009 - 2010 Report to Congress on the Breach Notification Program

* People using assistive technology may not be able to fully access information in this file. For assistance, contact the HHS Office for Civil Rights at (800) 368-1019, TDD toll-free: (800) 537-7697, or by emailing OCRMail@hhs.gov.

View the Report to Congress on Privacy Rule and Security Rule Compliance