CFR > Title 45 - Public Welfare > SUBTITLE A—DEPARTMENT OF HEALTH AND HUMAN SERVICES > SUBCHAPTER B—REQUIREMENTS RELATING TO HEALTH CARE ACCESS (parts 140 to 159) > PART 150—CMS ENFORCEMENT IN GROUP AND INDIVIDUAL INSURANCE MARKETS > SUBPART B—CMS Enforcement Processes for Determining Whether States Are Failing To Substantially Enforce HIPAA Requirements (§150.201 to §150.221) > 150.213—Form and content of notice.

150.213—Form and content of notice.

The notice provided to the State is in writing and does the following:
(a) Identifies the HIPAA requirement or requirements that have allegedly not been substantially enforced.
(b) Describes the factual basis for the allegation of a failure or failures to enforce HIPAA requirements.
(c) Explains that the consequence of a State's failure to substantially enforce HIPAA requirements is that CMS enforces them.
(d) Advises the State that it has 30 days from the date of the notice to respond, unless the time for response is extended as described in § 150.215 of this subpart. The State's response should include any information that the State wishes CMS to consider in making the preliminary determination described in § 150.217.