CHA News Article

CDPH Issues AFL Regarding Privacy Breaches
Deadline extended from five to 15 business days

The California Department of Public Health (CDPH) has issued the attached All Facilities Letter about AB 1755 (Gomez, D-Los Angeles), which was signed into law by the Governor and extends the time frame for reporting breaches of health information privacy to CDPH and to the patient from five business days to 15 business days following detection. CHA supported this bill to provide hospitals and other health care facilities more time to investigate the circumstances of a possible breach and, if necessary, to make the required notifications. The bill also permits notification to the patient to be made by alternative means, such as email, if specified by the patient. Current law requires that notification be made by U.S. mail. The bill applies to breaches detected on or after Jan. 1, 2015.