HIPAA - Breach Notification Policy

This policy template will help organizations establish a framework for responding to a data breach quickly and effectively. The procedures will consider all known contractual and regulatory requirements to minimize response times and mitigate the impact on confidentiality, data integrity, and availability. Additionally, this plan is intended to minimize reputational damage and the business costs associated with a breach.

Commonly associated evidence:

• Breach Letter

• Breach List

• Breach Procedures

• Forensic Process

• Head of IT Responsibilities

Who needs a policy like this?

• Businesses that adhere to HIPAA regulations

How to use the template:

• Click on the link above to access the template

  • If you are a Google Workplace organization, make a copy by going to File > Make a copy

  • If you are not a Google Workplace organization, download a copy by going to File > Download and selecting your preferred file type (available as DOCX, PDF, and more)

• Review and then remove instructional text

• Save in a centralized place

• Attach to evidence either through Integrations, Automated Collection, or direct upload

If you need help using the template, please let us know.