Legal HIPAA Violation Form

LEGAL HIPAA VIOLATION FORM

This Legal HIPAA Violation Form is executed by and between Reporting Party: and Covered Entity: (collectively, the Parties) as of the date of submission: .

RECITALS

WHEREAS, Reporting Party alleges that an action or omission occurred that may constitute a breach of the privacy or security provisions of the Health Insurance Portability and Accountability Act (HIPAA), relating to Protected Health Information ("PHI"); and

WHEREAS, Covered Entity is a health plan, health care clearinghouse, health care provider, or business associate obligated to safeguard PHI and to cooperate in internal review and remediation of potential HIPAA violations; and

WHEREAS, the Parties desire to document the alleged violation, initiate an internal assessment, and set forth obligations for investigation, confidentiality, remediation, and notice to affected individuals as required by applicable law.

NOW, THEREFORE, in consideration of the mutual covenants contained herein and other good and valuable consideration, the Parties agree as follows:

1. DEFINITIONS

For purposes of this Form: (a) "Protected Health Information" or "PHI" means individually identifiable health information transmitted or maintained in any form or medium as defined under HIPAA; (b) "Violation" means any act or omission that compromises the confidentiality, integrity, or availability of PHI, including unauthorized access, disclosure, loss, theft, or improper disposal; (c) "Investigation" means the internal fact-finding procedures described in Section 3.

2. ALLEGATION DETAILS

Medical records
Billing/payment information
Identifiers (name, SSN, DOB)
Prescription/drug treatment information
Other (describe)

3. INVESTIGATION PROCEDURE

Upon receipt of this Form, Covered Entity shall conduct a prompt, thorough, and impartial Investigation. The Investigation will include collection of relevant records, interviews of involved personnel, and preservation of evidence. The preliminary investigator assigned is: . The anticipated initial review period is business days, subject to extension for cause with notice as described in Section 11.

4. CONFIDENTIALITY; NON-RETALIATION

All information provided in this Form and obtained during the Investigation shall be treated as confidential to the extent permitted by law. Covered Entity shall limit access to Investigation materials to persons with a legitimate need to know. Retaliation by Covered Entity or its workforce against Reporting Party or any witness for filing this Form or cooperating in the Investigation is strictly prohibited; any alleged retaliation shall be reported immediately and will itself be investigated.

5. COOPERATION; ACCESS TO RECORDS

Reporting Party certifies that they will cooperate in good faith with the Investigation and will provide, upon request, any information, documents, or access reasonably necessary to complete the Investigation. Covered Entity shall provide access to relevant personnel and records, subject to applicable legal privilege and privacy protections.

6. CORRECTIVE ACTION AND REMEDIATION

If, following the Investigation, Covered Entity determines that a Violation occurred, Covered Entity shall take reasonable corrective measures, which may include workforce discipline, policy revision, retraining, technical remediation, and notification to affected individuals as required by law. Corrective actions must be documented in writing and retained as set forth in Section 8.

7. NOTICE TO INDIVIDUALS AND REPORTING OBLIGATIONS

Covered Entity shall assess the risk of harm and, where required by law or reasonable likelihood of risk, provide notice to affected individuals and to regulators in accordance with applicable statutes. Reporting Party may be informed of the Investigation's conclusion to the extent permitted by law and Covered Entity policy, with specific information redacted as necessary to protect privacy and legal privileges.

8. RECORD RETENTION

All records, determinations, corrective action plans, and correspondence relating to this allegation shall be retained by Covered Entity for a minimum of years or for the period required by law, whichever is longer, and made available to authorized auditors or regulators upon lawful request.

9. CERTIFICATION BY REPORTING PARTY

I certify under penalty of perjury that the information provided in this Form is true and complete to the best of my knowledge and that I am not submitting information that I know to be false. I understand that knowingly submitting a false report may result in disciplinary action or legal consequences.

Reporting Party contact information for follow-up: Phone: Email:

10. NOTICES

Any notice required or permitted under this Form shall be in writing and delivered to the addresses provided below: Notices to Reporting Party: Notices to Covered Entity:

11. AMENDMENTS; WAIVER; COUNTERPARTS

No amendment or waiver of any provision of this Form shall be effective unless in writing and executed by both Parties. Failure by either Party to enforce any provision shall not constitute a waiver of future enforcement. This Form may be executed in counterparts, each of which shall be deemed an original and all of which together shall constitute one instrument.

12. GOVERNING LAW; ENTIRE AGREEMENT; SEVERABILITY

This Form shall be governed by and construed in accordance with the laws of the state identified by Covered Entity in its corporate records, without regard to conflict of law principles. This Form constitutes the entire agreement between the Parties with respect to the subject matter herein and supersedes all prior representations and understandings. If any provision of this Form is held invalid or unenforceable, the remaining provisions shall remain in full force and effect.

13. MISCELLANEOUS PROVISIONS

Each Party represents and warrants that it has the authority to execute this Form, that the information provided herein is true and correct to the best of its knowledge, and that it will comply with all applicable privacy and security laws in connection with the Investigation and any remediation.

Sign Now