PRA IC List
Skip to main content
An official website of the United States government
The .gov means it's official.
Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you're on a federal government site.
The site is secure.
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.
Search:
Agenda
Reg Review
ICR
Information Collection List
IC Title
Status
Responses
Hours
Dollars
Document Type
Form No.
Form Name
164.509 Disclosures for which attestation is required
Unchanged
2794201
232850
0
164.520 Notice of Privacy Practices for Protected Health Information― Post updated notice online
Removed
0
0
0
164.520 Notice of Privacy Practices for Protected Health Information―Updating
Removed
0
0
0
164.530 Administrative Requirements-Policies & Procedures (new and updated)
Removed
0
0
0
164.530 Administrative Requirements―Training― 164.525 Update training content
Removed
0
0
0
500 or More Affected Individuals (investigating and documenting breach)
Unchanged
626
31300
0
Access of Individuals to Protected Health Information (copies of PHI)
Unchanged
615000
30750
0
Accounting for Disclosures of Protected Health Information
Unchanged
5000
250
0
Amendment of Protected Health Information (denials)
Unchanged
50000
4167
0
Amendment of Protected Health Information (requests)
Unchanged
150000
12500
0
Attestations requiring additional action
Unchanged
325
975
0
Attestations requiring investigation review
Unchanged
1300
1300
0
Business Associate Notice to Covered Entity – 500 or more affected individuals
Unchanged
20
1000
0
Business Associate Notice to Covered Entity – Less than 500 affected individuals
Unchanged
1165
9320
0
Business Associate's Obtain Subcontractors' Compliance Verification
New
1000000
83333
0
Configuration Management - Health Plan Sponsors
New
742411
371206
0
Configuration Management - Regulated Entities
New
1395396
697698
0
Contingency Plan - Criticality Analysis - Health Plan Sponsors
New
742411
371206
0
Contingency Plan - Testing and Revision - Health Plan Sponsors
New
742411
1484822
0
Contingency Plan- Criticality Analysis - Regulated Entities
Modified
1822600
7290400
0
Contingency Plan- Testing and Revision - Regulated Entities
Modified
1822600
14580800
0
Covered Entities Obtain Business Associates' Compliance Verification
New
822600
411300
0
Documentation - Review and Update
Modified
1822600
10935600
0
Individual Notice- Substitute Notice (posting or publishing)
Unchanged
2950
2950
1416000
Individual Notice- Written and E-mail Notice (drafting)
Unchanged
64592
32296
0
Individual Notice-Substitute Notice (individuals' voluntary burden to call toll-free number for information)
Unchanged
41760
5220
0
Individual Notice-Substitute Notice (staffing toll-free number)
Unchanged
2950
3481
191616
Individual Notice-Written and E-mail Notice (preparing and documenting notification)
Unchanged
64592
32296
0
Individual Notice-Written and E-mail Notice(processing and sending)
Unchanged
42004718
336038
17049295
Information System Activity Review - Documentation - Health Plan Sponsors
New
8908932
6681699
0
Information System Activity Review- Documentation - Regulated Entities
Modified
21871200
16403400
0
Less than 500 Affected Individuals (investigating and documenting breach)
Unchanged
2324
18592
0
Less than 500 Affected Individuals (investigating and documenting breach) breaches affecting <10 individuals
Unchanged
61642
246568
0
Maintenance Records - Health Plan Sponsors
New
8908932
4454466
0
Maintenance Records - Regulated Entities
Modified
21871200
131227200
0
Media Notice
Unchanged
626
783
0
Multi-factor Authentication - Health Plan Sponsors
New
742411
1113617
0
Multi-factor Authentication - Regulated Entities
New
1822600
2733900
0
Network Segmentation - Regulated Entities
New
1822600
8201700
0
Notice of Privacy Practice for Protected Health Information (Health plans- periodic distribution of NPPs by electronic mail)
Unchanged
150000000
417500
0
Notice of Privacy Practices for Protected Health Information (health care providers - dissemination/acknowledgement
Unchanged
613000000
30650000
107642800
Notice of Privacy Practices for Protected Health Information/health plan distribution paper mail
Unchanged
150000000
625000
37199700
Notice of Privacy Practices for Protected Health Information―Mailing notice to 10% of subscribers at a rate of 240 notices/hour
Removed
0
0
0
Notice to Secretary (notice for breaches affecting 500 or more individuals)
Unchanged
626
783
0
Notice to Secretary (notice for breaches affecting fewer than 500 individuals)
Unchanged
63966
63966
0
Notification of Contingency Plan Activation - Health Plan Sponsors
New
742411
123735
0
Notification of Contingency Plan Activation - Regulated Entities
New
1000000
500000
0
Notification of Termination of Access to ePHI - Regulated Entities
New
1822600
1822600
0
Notification of Termination of ePHI Access - Health Plan Sponsors
New
742411
185603
0
Ongoing Education - Health Plan Sponsors
New
8908932
1484822
0
Ongoing Education - Regulated Entities
Modified
21871200
21871200
0
Penetration Testing - Health Plan Sponsors
New
742411
1484822
0
Penetration Testing - Regulated Entities
New
1822600
5467800
0
Process for Requesting Exception Determinations (states or persons)
Modified
1
16
0
Revise Health Plan Documents - Health Plans
New
742411
371206
0
Revise Policies and Procedures - Regulated Entities
New
1822600
6379100
0
Revising Business Associate Agreements
Modified
1822600
1822600
0
Rights to request privacy protection for protected health information
Unchanged
40000
2000
0
Risk Analysis - Documentation - Health Plan Sponsors
New
742411
3712055
0
Risk Analysis-Documentation - Regulated Entities
Modified
1822600
18226000
0
Security Incidents (Other than Breaches) - Documentation - Health Plan Sponsors
New
8908932
17817864
0
Security Incidents (other than breaches)- Documentation - Regulated Entities
Modified
94775200
473876000
0
Security Incidents- Business Associate reporting of incidents (other than breach) to Covered Entities
Modified
12000000
120000000
0
Security Rule Compliance Audit - Regulated Entities
New
1822600
3645200
0
Update Workforce Training - Regulated Entities
New
1822600
3645200
0
Uses and Disclosures for Research Purposes
Modified
153857
12821
0
Uses and Disclosures for which Individual authorization is required
Modified
822600
822600
0
Uses and Disclosures-Organizational Requirement
Modified
822600
68550
0
Verification of Technical Safeguards by Business Associates
New
1000000
2000000
0
Total burden requested under this ICR:
1202562864
925144026
163499411
To view an IC, click on IC Title