Skip to Content


Agency Information Collection Activities; Submission to OMB for Review and Approval; Public Comment Request

Document Details

Information about this document as published in the Federal Register.

Published Document

This document has been published in the Federal Register. Use the PDF linked in the document sidebar for the official electronic format.

Start Preamble




In compliance with section 3506(c)(2)(A) of the Paperwork Reduction Act of 1995, the Office of the Secretary (OS), Department of Health and Human Services, will submit an Information Collection Request (ICR), described below, to the Office of Management and Budget (OMB) for review and approval. The ICR is for extension of the approved information collection assigned OMB control number 0990-0294, scheduled to expire on September 30, 2012. Comments submitted during the first public review of this ICR will be provided to OMB. OMB will accept further comments from the public on this ICR during the review and approval period.

Deadline: Comments on the ICR must be received within 30 days of the issuance of this notice.


Submit your comments, including the OMB control number 0990-0294 and document identifier HHS-OS-17371-30D, to or via facsimile to (202) 395-5806. Copies of the supporting statement and any related forms may be requested via email to or by calling (202) 690-6162.

Information Collection Request Title: Standards for Privacy of Individually Identifiable Health Information and Supporting Regulations at 45 CFR Parts 160 and 164.

Abstract: The Privacy Rule implements the privacy requirements of the Administrative Simplification subtitle of the Health Insurance Portability and Accountability Act of 1996. The regulations require covered entities (as defined in the regulations) to maintain strong protections for the privacy of individually identifiable health information; to use or disclose this information only as required or permitted by the Rule or with the express written authorization of the individual; to provide a notice of the entity's privacy practices; and to document compliance with the Rule. Start Printed Page 59401Respondents are health care providers, health plans, and health care clearinghouses. The affected public includes individuals, public and private businesses, state and local governments.

Estimated Annualized Burden Table

Burden Statement: Burden in this context means the time expended by persons to generate, maintain, retain, disclose or provide the information requested. This includes the time needed to review instructions, to develop, acquire, install and utilize technology and systems for the purpose of collecting, validating and verifying information, processing and maintaining information, and disclosing and providing information, to train personnel and to be able to respond to a collection of information, to search data sources, to complete and review the collection of information, and to transmit or otherwise disclose the information. The total annual burden hours estimated for this ICR are summarized in the table below.

Total Estimated Annualized Burden—Hours

SectionType of respondentNumber of respondentsNumber of responses per respondentAverage burden (in hours) per responseTotal burden hours
160.204Process for Requesting Exception Determinations (states or persons)40116640
164.504Uses and Disclosures—Organizational Requirements764,79915/6063,733
164.508Uses and Disclosures for Which Individual authorization is required764,79911764,799
164.512Uses and Disclosures for which Consent, Individual Authorization, or Opportunity to Agree or Object is Not Required (or other specified purposes by an IRB or privacy board)113,52415/609,460
164.520Notice of Privacy Practices for Protected Health Information (health plans)10,57013/60529
164.520Notice of Privacy Practices for Protected Health Information (health care providers—dissemination)613,000,00013/6030,650,000
164.520Notice of Privacy Practices for Protected Health Information (health care providers—acknowledgment)613,000,00013/6030,650,000
164.522Rights to Request Privacy Protection for Protected Health Information150,00013/607,500
164.524Access of individuals to Protected Health Information (disclosures)150,00013/607,500
164.526Amendment of Protected Health Information (requests)150,00013/607,500
164.526Amendment of Protected Health Information (denials)50,00013/602,500
164.528Accounting for Disclosures of Protected Health Information1,080,00015/6090,000
Start Signature

Keith A. Tucker,

Information Collection Clearance Officer, Department of Health and Human Services.

End Signature End Preamble

[FR Doc. 2012-23774 Filed 9-26-12; 8:45 am]