Breach Reports to Congress
This page describes the HITECH Act requirement for the Secretary of HHS to prepare and submit to Congress an annual report containing the number and nature of breaches reported to the Secretary and the actions taken in response to those breaches.
Issued by: Office for Civil Rights (OCR)
Reports to Congress on Breach Notification Program
Section 13402(i) of the HITECH Act requires the Secretary of Health and Human Services (“the Secretary”) to prepare and submit to Congress an annual report containing the number and nature of breaches reported to the Secretary, and the actions taken in response to those breaches. Section 13424(2) of the HITECH Act requires the Secretary to make each report available to the public on the HHS website.
The following report was prepared to fulfill these statutory requirements. This report provides an overview of the breach notification requirements, as well as a discussion of the reports the Secretary received that occurred during the reporting period.
2015-2016-2017 Report to Congress on the Breach Notification Program - Submitted to Congress on February 22, 2019.
HHS is committed to making its websites and documents accessible to the widest possible audience, including individuals with disabilities. We are in the process of retroactively making some documents accessible. If you need assistance accessing an accessible version of this document, please reach out to the Section 508 Help Desk.
DISCLAIMER: The contents of this database lack the force and effect of law, except as authorized by law (including Medicare Advantage Rate Announcements and Advance Notices) or as specifically incorporated into a contract. The Department may not cite, use, or rely on any guidance that is not posted on the guidance repository, except to establish historical facts.