Standards for Privacy of Individually Identifiable Health Information and Supporting Regulations at 45 CFR Parts 160 and 164

ICR 202304-0945-001

OMB: 0945-0003

Federal Form Document

⚠️ Notice: This information collection may be outdated. More recent filings for OMB 0945-0003 can be found here:

Forms and Documents

Document Name	Status
2023_04_18_HIPAA RHC Privacy NPRM_ICR_Supporting_Statement_FINAL.docx Supporting Statement A	2023-04-18

IC Document Collections

IC ID	Document Title	Status
259737	164.509 Disclosures for which attestation is required	New
259736	164.530 Administrative Requirements―Training― 164.525 Update training content	New
259735	164.530 Administrative Requirements-Policies & Procedures (new and updated)	New
259734	164.520 Notice of Privacy Practices for Protected Health Information― Post updated notice online	New
259733	164.520 Notice of Privacy Practices for Protected Health Information―Updating	New
259732	164.509 Uses and Disclosures for which an Attestation is Required―Creating New Form	New
259731	164.504 Revising Business Associate Agreements	New
237898	Business Associate Notice to Covered Entity – Less than 500 affected individuals	Unchanged
237897	Business Associate Notice to Covered Entity – 500 or more affected individuals	Unchanged
221884	Less than 500 Affected Individuals (investigating and documenting breach) breaches affecting	Unchanged
221883	Less than 500 Affected Individuals (investigating and documenting breach)	Unchanged
221882	500 or More Affected Individuals (investigating and documenting breach)	Unchanged
221881	Notice to Secretary (notice for breaches affecting fewer than 500 individuals)	Unchanged
221880	Notice to Secretary (notice for breaches affecting 500 or more individuals)	Unchanged
221879	Media Notice	Unchanged
221878	Individual Notice-Substitute Notice (individuals' voluntary burden to call toll-free number for information)	Unchanged
221877	Individual Notice-Substitute Notice (staffing toll-free number)	Unchanged
221876	Individual Notice- Substitute Notice (posting or publishing)	Unchanged
221875	Individual Notice-Written and E-mail Notice(processing and sending)	Modified
221874	Individual Notice-Written and E-mail Notice (preparing and documenting notification)	Unchanged
221872	Individual Notice- Written and E-mail Notice (drafting)	Unchanged
221871	Documentation - Review and Update	Modified
221870	Security Incidents- Business Associate reporting of incidents (other than breach) to Covered Entities	Unchanged
221869	Maintenance Records	Modified
221868	Contingency Plan- Criticality Analysis	Modified
221866	Contingency Plan- Testing and Revision	Modified
221862	Security Incidents (other than breaches)- Documentation	Modified
221861	Security Reminders- Periodic Updates	Modified
221860	Information System Activity Review- Documentation	Modified
221859	Risk Analysis-Documentation	Modified
208573	Rights to request privacy protection for protected health information	Modified
190153	Accounting for Disclosures of Protected Health Information	Unchanged
190152	Amendment of Protected Health Information (denials)	Unchanged
190151	Amendment of Protected Health Information (requests)	Unchanged
190150	Access of Individuals to Protected Health Information (disclosures)	Unchanged
190149	Notice of Privacy Practice for Protected Health Information (Health plans- periodic distribution of NPPs by electronic mail)	Modified
190147	Notice of Privacy Practices for Protected Health Information (health care providers - dissemination/acknowledgement	Modified
190146	Notice of privacy Practices for Protected Health Information/health plan distribution paper mail	Modified
190145	Uses and Disclosures for Research Purposes	Unchanged
190144	Uses and Disclosures for which Individual authorization is required	Modified
190143	Uses and Disclosures-Organizational Requirement	Modified
10428	Process for Requesting Exception Determinations (states or persons)	Modified

ICR Details