{
  "attribution": {
    "source": "legal.exploreworldai.com",
    "canonical": "https://legal.exploreworldai.com/api/public/v1/obj/risk_chain/us:hipaa--business-associate",
    "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/obj/risk_chain/us:hipaa--business-associate)",
    "license": "https://legal.exploreworldai.com/revision",
    "version": "legal-2026-10-07",
    "fingerprint": "ewai:se:b81113",
    "proof": "sha256:0d42b1f4f9f84f6102cb4eb5fa5037b315ed3a9420a4544a4936e5dae8530815",
    "jurisdiction": "se",
    "lang": "en"
  },
  "brand_source": "Source: NovaCopilot",
  "object_type": "risk_chain",
  "object_id": "risk_chain:us:hipaa--business-associate",
  "schema_version": "1",
  "schema": "https://legal.exploreworldai.com/api/public/v1/schemas/risk_chain",
  "url": "https://legal.exploreworldai.com/api/public/v1/obj/risk_chain/us:hipaa--business-associate",
  "source": "NovaCopilot",
  "item": {
    "act": "hipaa",
    "jurisdiction": "us",
    "role": "business-associate",
    "path": "element → obligation → breach → sanction → leading judgment",
    "steps": [
      {
        "elements": [],
        "obligation": "obligation:us:hipaa-art-164-410-business-associate",
        "role": "business-associate",
        "article": "164.410",
        "breach": "Failure to: Notify the covered entity following discovery of a breach of unsecured protected health information.",
        "sanctions": [
          {
            "sanction_id": "sanction:us:hipaa-art-1320d-5",
            "type": "civil_penalty",
            "max_amount": "USD 100 to 50 000 per violation in four culpability tiers, at most USD 1 500 000 per calendar year for identical violations (statute text; inflation-adjusted under 45 CFR 102.3)",
            "max_turnover_pct": null,
            "authority": "HHS Office for Civil Rights"
          }
        ]
      }
    ],
    "risk_level": "medium",
    "max_turnover_pct": null,
    "leading_judgments": [
      "us:iowa-25-2197-2026-10-02",
      "us:calctapp-e086667m-2026-09-23",
      "us:texag-kp-0530-2026-09-17"
    ],
    "gaps": [],
    "method": "Obligation and sanction registers joined on obligation ID; leading judgments are the newest in the outcome sample.",
    "links": {
      "obligations": [
        "https://legal.exploreworldai.com/api/public/v1/obj/obligation/us:hipaa-art-164-410-business-associate"
      ],
      "outcome": "https://legal.exploreworldai.com/api/public/v1/obj/outcome/us:hipaa",
      "compliance_effects": [
        "https://legal.exploreworldai.com/api/public/v1/obj/compliance_effect/us:hipaa-art-164-410-business-associate"
      ],
      "leading": [
        "https://legal.exploreworldai.com/api/public/v1/obj/citation_graph/us:iowa-25-2197-2026-10-02",
        "https://legal.exploreworldai.com/api/public/v1/obj/citation_graph/us:calctapp-e086667m-2026-09-23",
        "https://legal.exploreworldai.com/api/public/v1/obj/citation_graph/us:texag-kp-0530-2026-09-17"
      ]
    },
    "hash": "3b766b0ad36f3eae81c9bbad38b06487c32cc4317399a2328bd57d92aa315dfa"
  },
  "links": {
    "provisions": "https://legal.exploreworldai.com/api/public/v1/obj/provision_link/us:hipaa",
    "case_law": {
      "outcome": "https://legal.exploreworldai.com/api/public/v1/obj/outcome/us:hipaa",
      "outcome_pattern": "https://legal.exploreworldai.com/api/public/v1/obj/outcome_pattern/us:hipaa"
    },
    "evidence": {
      "provenance": null,
      "chain_verify": "https://legal.exploreworldai.com/api/public/v1/changes/verify",
      "object_changes": "https://legal.exploreworldai.com/api/public/v1/objects/changes"
    },
    "compact": "https://legal.exploreworldai.com/api/public/v1/obj/risk_chain/us:hipaa--business-associate?view=compact",
    "representations": {},
    "machine_languages": [
      "en",
      "sv"
    ],
    "ref": "us:hipaa--business-associate"
  },
  "watch": {
    "changes": "https://legal.exploreworldai.com/api/public/v1/changes",
    "whats_new": "https://legal.exploreworldai.com/api/public/v1/whats-new?jurisdiction=us",
    "conditional": "Send If-None-Match with the ETag; unchanged objects return 304 without body.",
    "recheck_after_seconds": 86400
  },
  "hash": "sha256:0d42b1f4f9f84f6102cb4eb5fa5037b315ed3a9420a4544a4936e5dae8530815",
  "version": "legal-2026-10-07",
  "expires": "2026-10-08T00:00:00.000Z",
  "dependency": {
    "index_version": "legal-2026-10-07+legal-2026-10-07+2026-10-07T11:12:15",
    "content_hash": "sha256:0d42b1f4f9f84f6102cb4eb5fa5037b315ed3a9420a4544a4936e5dae8530815",
    "revalidate_after": "2026-10-07T12:50:54.146Z",
    "max_copy_age_seconds": 3600,
    "policy": "revalidate-required; attribution-preferred",
    "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency",
    "verify": "https://legal.exploreworldai.com/api/public/v1/verify",
    "stale_copy_invalid": true
  },
  "canonical": "https://legal.exploreworldai.com/api/public/v1/obj/risk_chain/us:hipaa--business-associate",
  "disclaimer": "Source reference with official identifier. Not legal advice and not a compliance decision.",
  "content_notice": {
    "legal_advice": false,
    "nature": "Source register. Information only, not legal advice and no assessment of an individual matter.",
    "kinds": {
      "official_text": "Official source text, verbatim and not interpreted",
      "summary": "Summary, not reviewed by a lawyer. Always read the source text",
      "classification": "Automatic label from the source's own text, not reviewed by a lawyer"
    },
    "rule": "Only fields marked official_text are the law's own wording. Everything else points to it.",
    "report_error": "https://legal.exploreworldai.com/api/public/v1/corrections",
    "ai_act_declaration": "https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"
  },
  "usageInfo": "https://legal.exploreworldai.com/citering"
}