Question 38.

For any current network that you operate, have you experienced any Health Insurance Portability and Accountability Act (HIPAA)-reportable breaches of electronic protected health information (ePHI) over the past three (3) years? If yes, for each breach, provide the name of the covered entity and business associate involved, the covered entity type, the breach submission date, the state, the number of individuals affected by the breach, the type of breach, and the location of breached information .. If you are relying upon your Parent’s Current Network to meet the Historic Experience requirement, then you must provide the requested information related to any such HIPAA-reportable breaches occurring in connection with your Parent Organization.