Description
When a breach occurs, your organization has 60 days to notify affected individuals — and the same 60-day window applies to HHS reporting for breaches involving 500 or more individuals. The organizations that handle breach response well are the ones that had the documentation in place before the incident happened.
The HIPAA Breach Documentation Kit is a set of 14 professionally written, ready-to-use templates supporting every stage of the breach response process. From initial incident intake through the four-factor risk assessment, investigation, notification letters, and corrective action follow-up, every step has a corresponding document organized in its own folder.
The kit was built by compliance professionals with real breach response experience. Each template includes guidance fields and instructional notes so your team can use it correctly even under the pressure of an active incident. The START HERE guide orients your team to the full kit and walks through how each document connects to the others.
What Is Included (14 Documents)
Navigation
- START HERE Breach Documentation Kit Guide
Incident Response (5 documents)
- Incident Report Form
- Breach Response Coversheet and Attachments Checklist
- Breach Investigation Procedures
- Breach Decision Matrix
- Incident Tracking Log
Risk Assessment (1 document)
- Breach Risk Assessment Form (four-factor low probability of compromise analysis)
Notification (4 documents)
- Breach Notification Timeliness Tracker (60-day window management tool)
- Breach Notification Letter to Individual
- HHS Secretary Breach Notification Template
- Media Notice Template (for breaches affecting 500 or more residents of a state or jurisdiction)
Incident Intake (1 document)
- Business Associate Breach Notification Form
Sanctions and Corrective Action (2 documents)
- Sanctions and Corrective Action Plan for Privacy Violation
- Sanction Policy Acknowledgment Form
Who This Is For
Privacy officers, security officers, compliance teams, legal counsel, and practice administrators at covered entities and business associates who need a complete, organized breach response toolkit for incident preparation, active response, or annual compliance program review.
Delivered as a zipped folder of editable Microsoft Word (.docx) files organized in 5 folders. Available immediately after purchase.
