Industry News

Change Health Breach: Next Steps

Following the Change Healthcare data breach, CH has recently confirmed: “Notices To Be Handled by CHC, Unless Covered Entities Opt Out. If you are a HIPAA covered entity customer, CHC is offering to make HIPAA and state attorney general notifications as required by state law on your behalf as a delegate, unless you decide to opt out of CHC’s notification process and handle your own notices. CHC’s substitute notice under HIPAA, notice letters to affected individuals, media notice under HIPAA, and OCR and state attorney general notice filing will be on behalf of impacted CHC covered entity customers, except for those customers who opt out to handle their own notifications. If you want CHC to manage these notifications for you, you do not need to respond. You do not need to do anything to opt in, and if you do not opt out, we will proceed on your behalf.”