Question: Do we still submit a report for the HHS annual breach reporting even if we don’t have any breaches during the year?
Answer: “No, if you haven’t had any breaches to report, there is no particular report that you need to make,” answers Jim Sheldon-Dean, founder and director of compliance services at Lewis Creek Systems, LLC in Charlotte, VT. You would submit a report only if you do have a breach.
“But do keep in mind that all of the breaches that you have, even the small ones, do need to be reported,” Sheldon-Dean warns. You must report the bigger breaches within 60 days and the smaller ones by March 1 every year.