Information Collection Request

Standards for Privacy of Individually Identifiable Health Information and Supporting Regulations at 45 CFR Parts 160 and 164

ICR 202211-0945-001 · OMB 0945-0003 · Received in OIRA

Forms and Documents
DocumentTypeStatusAvailability
12_2_2022_HIPAA_Part_2_Supporting_Statement.docx Supporting Statement A Uploaded 2022-12-02 Missing upstream
published 60-FRN day 0945-0003.pdf Supplementary Document Uploaded 2019-09-30 Repair queued
30-day FRN 0945-0003 HIPAA 2019 ICR Extension.doc Supplementary Document Uploaded 2019-09-30 Repair queued
0945-0003 Change Request.doc Justification for No Material/Nonsubstantive Change Uploaded 2017-10-12 Repair queued
IC Document Collections
IC IDCollectionTypeStatusForm
257001 Administrative Requirements― Policies & Procedures― Revising the Notice of Privacy Practices, 164.520 New
237898 Business Associate Notice to Covered Entity – Less than 500 affected individuals Unchanged
237897 Business Associate Notice to Covered Entity – 500 or more affected individuals Unchanged
221884 Less than 500 Affected Individuals (investigating and documenting breach) breaches affecting Unchanged
221883 Less than 500 Affected Individuals (investigating and documenting breach) Unchanged
221882 500 or More Affected Individuals (investigating and documenting breach) Unchanged
221881 Notice to Secretary (notice for breaches affecting fewer than 500 individuals) Unchanged
221880 Notice to Secretary (notice for breaches affecting 500 or more individuals) Unchanged
221879 Media Notice Unchanged
221878 Individual Notice-Substitute Notice (individuals' voluntary burden to call toll-free number for information) Unchanged
221877 Individual Notice-Substitute Notice (staffing toll-free number) Unchanged
221876 Individual Notice- Substitute Notice (posting or publishing) Unchanged
221875 Individual Notice-Written and E-mail Notice(processing and sending) Unchanged
221874 Individual Notice-Written and E-mail Notice (preparing and documenting notification) Unchanged
221872 Individual Notice- Written and E-mail Notice (drafting) Unchanged
221871 Documentation - Review and Update Modified
221870 Security Incidents- Business Associate reporting of incidents (other than breach) to Covered Entities Unchanged
221869 Maintenance Records Modified
221868 Contingency Plan- Criticality Analysis Modified
221866 Contingency Plan- Testing and Revision Modified
221862 Security Incidents (other than breaches)- Documentation Modified
221861 Security Reminders- Periodic Updates Modified
221860 Information System Activity Review- Documentation Modified
221859 Risk Analysis-Documentation Modified
208573 Rights to request privacy protection for protected health information Modified
190153 Accounting for Disclosures of Protected Health Information Unchanged
190152 Amendment of Protected Health Information (denials) Unchanged
190151 Amendment of Protected Health Information (requests) Unchanged
190150 Access of Individuals to Protected Health Information (disclosures) Unchanged
190149 Notice of Privacy Practice for Protected Health Information (Health plans- periodic distribution of NPPs by electronic mail) Unchanged
190147 Notice of Privacy Practices for Protected Health Information (health care providers - dissemination/acknowledgement Unchanged
190146 Notice of privacy Practices for Protected Health Information/health plan distribution paper mail Unchanged
190145 Uses and Disclosures for Research Purposes Unchanged
190144 Uses and Disclosures for which Individual authorization is required Modified
190143 Uses and Disclosures-Organizational Requirement Modified
10428 Process for Requesting Exception Determinations (states or persons) Modified
ICR Details
StatusReceived in OIRA
Agency/SubagencyHHS/OCR
OMB Control No0945-0003
Type of Information CollectionRevision of a currently approved collection
Previous ICR Reference No201909-0945-001
Agency Tracking No20296
Date Submitted to OIRA1969-12-31
Requested Expiration Date1969-12-31