HIPAA template · Security, Privacy and Breach Notification Rules
HIPAA Breach Notification Policy
Breach identification and reporting procedures. Written for your company, citing the controls below.
- Sections
- 4
- Controls cited
- 7
- Formats
- PDF, Word
- Shelf
- 12 HIPAAdocuments in all
No card needed to start.
- Cites
- §164.308(a)(6), GDPR Art. 33, GDPR Art. 34 and 4 more
- Formats
- PDF and Word
Sections
Each written around your company: your tools, your roles, your review dates.
- Purpose and Scope
- Breach Definition
- Investigation
- Notification Requirements
Controls it cites
The HIPAA controls first, then the matching controls in other frameworks.
- §164.308(a)(6)Security Incident ProceduresHIPAA
- GDPR Art. 33Breach Notification to AuthorityGDPR
- GDPR Art. 34Breach Communication to Data SubjectGDPR
- SOC 2 CC7.3System Operations: Incident ResponseSOC 2
- SOC 2 CC7.4System Operations: Incident HandlingSOC 2
- ISO A.5.24Incident Management PlanningISO 27001
- CSF RS.CO-2Incident ReportingNIST CSF
Recent changes
Updates from official sources that name this policy. All policy updates
22 Oct 2026 · The HIPAA Journal
Massachusetts AG settles HIPAA and fraud allegations with Transformative HealthcareReview the Breach Notification Policy to ensure it includes procedures for timely notification in the event of unauthorized access to protected health information.
22 Oct 2026 · The HIPAA Journal
OCR and state attorneys general issue HIPAA violation fines and settlementsReview the breach notification policy to ensure timely notifications to individuals and HHS, as several settlements involved delayed or missing breach notifications.
- HIPAA5 sections
Access Control Policy
Cites§164.312(a)PDF · WordCites HIPAA §164.312(a), named in the template description. - HIPAA5 sections
Audit Controls Policy
Cites§164.312(b)PDF · WordCites HIPAA §164.312(b), named in the template description. - HIPAA5 sections
Integrity Controls Policy
Cites§164.312(c)PDF · WordCites HIPAA §164.312(c), named in the template description. - HIPAA5 sections
Transmission Security Policy
Cites§164.312(e)PDF · WordCites HIPAA §164.312(e), named in the template description. - HIPAA5 sections
Contingency Plan
Cites§164.308(a)(7)PDF · WordCites HIPAA §164.308(a)(7), named in the template description. - HIPAA5 sections
Workforce Training Policy
Cites§164.308(a)(5)PDF · WordCites HIPAA §164.308(a)(5), named in the template description.
HIPAA on its own
- Documents
- 12
- Plan
- HIPAA Starter
- Price
- $99 a month or $950 a year
HIPAA Starter covers HIPAA only. HIPAA plus one more framework is Growth, $199 a month.
Your first policy is free. No card needed to start.