[Federal Register Volume 78, Number 104 (Thursday, May 30, 2013)]
[Notices]
[Pages 32389-32390]
From the Federal Register Online via the Government Publishing Office [www.gpo.gov]
[FR Doc No: 2013-12828]


=======================================================================
-----------------------------------------------------------------------

DEPARTMENT OF HEALTH AND HUMAN SERVICES

Office of the Secretary

[Document Identifier: HHS-OS-19129-30D]


Agency Information Collection Activities; Submission to OMB for 
Review and Approval; Public Comment Request

AGENCY: Office of the Secretary, HHS.

ACTION: Notice.

-----------------------------------------------------------------------

SUMMARY: In compliance with section 3507(a)(1)(D) of the Paperwork 
Reduction Act of 1995, the Office of the Secretary (OS), Department of 
Health and Human Services, has submitted an Information Collection 
Request (ICR), described below, to the Office of Management and Budget 
(OMB) for review and approval. The ICR is for a new collection. 
Comments submitted during the first public review of this ICR will be 
provided to OMB. OMB will accept further comments from the public on 
this ICR during the review and approval period.

DATES: Comments on the ICR must be received on or before July 1, 2013.

ADDRESSES: Submit your comments to [email protected] or via 
facsimile to (202) 395-5806.

FOR FURTHER INFORMATION CONTACT: Information Collection Clearance 
staff, [email protected] or (202) 690-6162.

SUPPLEMENTARY INFORMATION: When submitting comments or requesting 
information, please include the Information Collection Request Title 
and document identifier HHS-OS-19129-30D for reference.
    Information Collection Request Title: HIPAA Audit Review Survey.
    Abstract: This information collection consists of an online survey 
of 115 covered entities (health plans, health care clearinghouses, and 
health care providers) that were audited in 2012 through the Office for 
Civil Rights HIPAA Audit Program. The survey will gather information on 
the effect of the audits on the audited entities and the entities' 
opinions about the audit process.
    Need and Proposed Use of the Information: The Office for Civil 
Rights is currently conducting a review of the HIPAA Audit program to 
determine its efficacy in assessing the HIPAA compliance efforts of 
covered entities. As part of that review, the online survey will be 
used to:
     Measure the effect of the HIPAA Audit program on covered 
entities;
     Gauge their attitudes towards the audit overall and in 
regards to major audit program features, such as the document request, 
communications received, the on-site visit, the audit-report findings 
and recommendations;
     Obtain estimates of costs incurred by covered entities, in 
time and money, spent responding to audit-related requests;
     Seek feedback on the effect of the HIPAA Audit program on 
the day-to-day business operations; and
     Assess whether improvements in HIPAA compliance were 
achieved as a result of the Audit program.
    The information, opinions, and comments collected using the online 
survey will be used to produce recommendations for improving the HIPAA 
Audit program.
    Likely Respondents: The 115 audit points-of-contact for each 
covered entity audited as part of the 2012 HIPAA Compliance Audit 
Program.
    Burden Statement: Burden in this context means the time expended by 
persons to generate, maintain, retain, disclose or provide the 
information requested. This includes the time needed to review 
instructions, to develop, acquire, install and utilize technology and 
systems for the purpose of collecting, validating and verifying 
information, processing and maintaining information, and disclosing and 
providing information, to train personnel and to be able to respond to 
a collection of information, to search data sources, to complete and 
review the collection of information, and to transmit or otherwise 
disclose the information. The total annual burden hours estimated for 
this ICR are summarized in the table below.

                                    Total Estimated Annualized Burden--Hours
----------------------------------------------------------------------------------------------------------------
                                                                     Number of    Average burden
      Type of respondent            Form name        Number of     responses per   per response    Total burden
                                                    respondents     respondent      (in hours)         hours
----------------------------------------------------------------------------------------------------------------
Covered Entity Privacy and      OCR HIPAA Audit              115               1              27              52
 Security Officer(s).            Evaluation
                                 Survey.
                               ---------------------------------------------------------------------------------
    Total.....................  ................  ..............  ..............  ..............              52
----------------------------------------------------------------------------------------------------------------



[[Page 32390]]

Darius Taylor,
Deputy, Information Collection Clearance Officer.
[FR Doc. 2013-12828 Filed 5-29-13; 8:45 am]
BILLING CODE 4153-01-P