{"attribution":{"source":"legal.exploreworldai.com","canonical":"https://legal.exploreworldai.com/api/public/v1/obj/sme_kit/us:hipaa--art-164-406","cite_as":"NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/obj/sme_kit/us:hipaa--art-164-406)","license":"https://legal.exploreworldai.com/revision","version":"legal-2026-10-25","fingerprint":"ewai:se:a91aff","proof":"sha256:c759a05543325bc1c70058430b16644edcd7ec4480a1952754d17f4191764a74","jurisdiction":"se","lang":"en","publisher":"NovaCopilot by ExploreWorld Legal","terms":"https://legal.exploreworldai.com/om"},"brand_source":"Source: NovaCopilot","object_type":"sme_kit","object_id":"sme_kit:us:hipaa--art-164-406","schema_version":"1","schema":"https://legal.exploreworldai.com/api/public/v1/schemas/sme_kit","url":"https://legal.exploreworldai.com/api/public/v1/obj/sme_kit/us:hipaa--art-164-406","source":"NovaCopilot","item":{"coverage":{"complete":8,"total":10,"label":"8 of 10 answers ready","reasons":{"exceptions":"not_in_register","outcome_patterns":"insufficient_cases"}},"subject":"us:hipaa--art-164-406","act":"hipaa","article":"164-406","answers":[{"key":"obligations","status":"ready","ids":["obligation:us:hipaa-art-164-406-covered-entity"],"sha256":"71a66e0cfd7ed1a65177e601f85165eceabb5adb6b4eccfa3a4f0751962ec1c4"},{"key":"responsibility","status":"ready","ids":["obligation:us:hipaa-art-164-406-covered-entity"],"sha256":"3d354226f59f0e4c3c763cbbf406859d775485029fb0b93e7879fcb4f3df6b33"},{"key":"sanctions","status":"ready","ids":["sanction:us:hipaa-art-1320d-5"],"sha256":"cb8ca3c35f6af0b9fc0674178dec680b532425cc9614be13dd02c28c0c91d7de"},{"key":"risks","status":"ready","ids":["risk_chain:us:hipaa--covered-entity"],"sha256":"9187d912c66a665ad7ac36898a53e647245b656651a3f8cc00aba369163ca41b"},{"key":"exceptions","status":"gap","ids":[],"sha256":null},{"key":"documentation","status":"ready","ids":["documentation_requirement:us:hipaa--art-164-406"],"sha256":"b3931f9e42a3460d7c3b5737c9ff412ffb08699e2c3c729ba3764ef020d9550e"},{"key":"checklist","status":"ready","ids":["obligation:us:hipaa-art-164-406-covered-entity"],"sha256":"bc377333fd17b48700288a958bd813c9a5cef897fa36dc1af365d2ed8d709bfa"},{"key":"precedents","status":"ready","ids":["precedent:us:ohioctapp-2-26-07-2026-10-05","precedent:us:iowa-25-2197-2026-10-02","precedent:us:calctapp-e086667m-2026-09-23","precedent:us:txctapp10-10-24-00353-cv-2026-09-17","precedent:us:texag-kp-0530-2026-09-17"],"sha256":"e087829652cf85b978ff708710f06d8f51e5647f70ea0d95eab32861aed06c45"},{"key":"provision_links","status":"ready","ids":["provision_link:us:hipaa"],"sha256":"66a5e92eb1002fed5735f9566765c97fed710a333930b41e224c8881726cef51"},{"key":"outcome_patterns","status":"gap","ids":[],"sha256":null}],"answers_full":[{"question":"Which obligations apply?","key":"obligations","status":"ready","answer":"1 obligations: Notify prominent media outlets when a breach involves more than 500 residents of a State or jurisdiction.","ids":["obligation:us:hipaa-art-164-406-covered-entity"],"urls":["https://legal.exploreworldai.com/api/public/v1/obj/obligation/us:hipaa-art-164-406-covered-entity"],"sha256":"71a66e0cfd7ed1a65177e601f85165eceabb5adb6b4eccfa3a4f0751962ec1c4","reason":null},{"question":"Who is responsible?","key":"responsibility","status":"ready","answer":"Responsible roles: covered-entity.","ids":["obligation:us:hipaa-art-164-406-covered-entity"],"urls":["https://legal.exploreworldai.com/api/public/v1/obj/compliance_effect/us:hipaa-art-164-406-covered-entity"],"sha256":"3d354226f59f0e4c3c763cbbf406859d775485029fb0b93e7879fcb4f3df6b33","reason":null},{"question":"Which sanctions can be triggered?","key":"sanctions","status":"ready","answer":"1 sanctions; e.g. USD 100 to 50 000 per violation in four culpability tiers, at most USD 1 500 000 per calendar year for identical violations (statute text; inflation-adjusted under 45 CFR 102.3).","ids":["sanction:us:hipaa-art-1320d-5"],"urls":["https://legal.exploreworldai.com/api/public/v1/obj/sanction/us:hipaa-art-1320d-5"],"sha256":"cb8ca3c35f6af0b9fc0674178dec680b532425cc9614be13dd02c28c0c91d7de","reason":null},{"question":"What are the risks?","key":"risks","status":"ready","answer":"Risk level medium across 1 roles.","ids":["risk_chain:us:hipaa--covered-entity"],"urls":["https://legal.exploreworldai.com/api/public/v1/obj/risk_chain/us:hipaa--covered-entity"],"sha256":"9187d912c66a665ad7ac36898a53e647245b656651a3f8cc00aba369163ca41b","reason":null},{"question":"Which exceptions apply?","key":"exceptions","status":"gap","answer":null,"ids":[],"urls":[],"sha256":null,"reason":"not_in_register"},{"question":"Which documentation is required?","key":"documentation","status":"ready","answer":"Keep: Report to authority.","ids":["documentation_requirement:us:hipaa--art-164-406"],"urls":["https://legal.exploreworldai.com/api/public/v1/obj/documentation_requirement/us:hipaa--art-164-406"],"sha256":"b3931f9e42a3460d7c3b5737c9ff412ffb08699e2c3c729ba3764ef020d9550e","reason":null},{"question":"What does a compliance checklist look like?","key":"checklist","status":"ready","answer":"1 checks across 1 roles.","ids":["obligation:us:hipaa-art-164-406-covered-entity"],"urls":[],"sha256":"bc377333fd17b48700288a958bd813c9a5cef897fa36dc1af365d2ed8d709bfa","reason":null},{"question":"Which precedents support the answer?","key":"precedents","status":"ready","answer":"29 judgments in the register; leading: us:ohioctapp-2-26-07-2026-10-05, us:iowa-25-2197-2026-10-02, us:calctapp-e086667m-2026-09-23, us:txctapp10-10-24-00353-cv-2026-09-17, us:texag-kp-0530-2026-09-17.","ids":["precedent:us:ohioctapp-2-26-07-2026-10-05","precedent:us:iowa-25-2197-2026-10-02","precedent:us:calctapp-e086667m-2026-09-23","precedent:us:txctapp10-10-24-00353-cv-2026-09-17","precedent:us:texag-kp-0530-2026-09-17"],"urls":["https://legal.exploreworldai.com/api/public/v1/obj/precedent/us:ohioctapp-2-26-07-2026-10-05","https://legal.exploreworldai.com/api/public/v1/obj/precedent/us:iowa-25-2197-2026-10-02","https://legal.exploreworldai.com/api/public/v1/obj/precedent/us:calctapp-e086667m-2026-09-23","https://legal.exploreworldai.com/api/public/v1/obj/precedent/us:txctapp10-10-24-00353-cv-2026-09-17","https://legal.exploreworldai.com/api/public/v1/obj/precedent/us:texag-kp-0530-2026-09-17"],"sha256":"e087829652cf85b978ff708710f06d8f51e5647f70ea0d95eab32861aed06c45","reason":null},{"question":"How are the rules linked to other rules?","key":"provision_links","status":"ready","answer":"Provision relations for hipaa.","ids":["provision_link:us:hipaa"],"urls":["https://legal.exploreworldai.com/api/public/v1/obj/provision_link/us:hipaa"],"sha256":"66a5e92eb1002fed5735f9566765c97fed710a333930b41e224c8881726cef51","reason":null},{"question":"How do courts usually rule in similar situations?","key":"outcome_patterns","status":"gap","answer":null,"ids":[],"urls":[],"sha256":null,"reason":"insufficient_cases"}],"checklist":[{"step":1,"role":"covered-entity","check":"Notify prominent media outlets when a breach involves more than 500 residents of a State or jurisdiction.","provision":"hipaa 164.406","deadline":"60 days","if_not":["sanction:us:hipaa-art-1320d-5"],"done":false}],"links":{"act_kit":"https://legal.exploreworldai.com/api/public/v1/obj/sme_kit/us:hipaa","provisions":[],"case_kits":["https://legal.exploreworldai.com/api/public/v1/obj/case_kit/us:ohioctapp-2-26-07-2026-10-05","https://legal.exploreworldai.com/api/public/v1/obj/case_kit/us:iowa-25-2197-2026-10-02","https://legal.exploreworldai.com/api/public/v1/obj/case_kit/us:calctapp-e086667m-2026-09-23","https://legal.exploreworldai.com/api/public/v1/obj/case_kit/us:txctapp10-10-24-00353-cv-2026-09-17","https://legal.exploreworldai.com/api/public/v1/obj/case_kit/us:texag-kp-0530-2026-09-17"],"documentation":"https://legal.exploreworldai.com/api/public/v1/obj/documentation_requirement/us:hipaa--art-164-406","list":"https://legal.exploreworldai.com/api/public/v1/sme-kits","changes":"https://legal.exploreworldai.com/api/public/v1/objects/changes?type=sme_kit"},"method":"Ten fixed business questions answered from existing deterministic registers. Gaps carry fixed reason codes. No model writes anything.","hash":"8e446759647b934d45ffb715af01e2867e5cc6e4f5f869cbcd2520c7f0704e4d"},"links":{"provisions":"https://legal.exploreworldai.com/api/public/v1/obj/provision_link/us:hipaa--art-164-406","case_law":{"outcome":"https://legal.exploreworldai.com/api/public/v1/obj/outcome/us:hipaa--art-164-406","outcome_pattern":"https://legal.exploreworldai.com/api/public/v1/obj/outcome_pattern/us:hipaa--art-164-406"},"evidence":{"provenance":null,"chain_verify":"https://legal.exploreworldai.com/api/public/v1/changes/verify","object_changes":"https://legal.exploreworldai.com/api/public/v1/objects/changes"},"compact":"https://legal.exploreworldai.com/api/public/v1/obj/sme_kit/us:hipaa--art-164-406?view=compact","representations":{},"machine_languages":["en","sv"],"ref":"us:hipaa--art-164-406"},"watch":{"risk":"https://legal.exploreworldai.com/api/public/v1/risk?id=us%3Ahipaa--art-164-406","relations":"https://legal.exploreworldai.com/api/public/v1/relations?id=us%3Ahipaa--art-164-406","risk_changes":"https://legal.exploreworldai.com/api/public/v1/risk-changes","node_state":"https://legal.exploreworldai.com/api/public/v1/node-state?id=us%3Ahipaa--art-164-406","provenance":"https://legal.exploreworldai.com/api/public/v1/obj/provenance/us:hipaa--art-164-406"},"metadata":{"schema":"novacopilot_object_metadata/1","canonical_url":"https://legal.exploreworldai.com/api/public/v1/obj/sme_kit/us:hipaa--art-164-406","source":"Source: NovaCopilot","official_source":null,"short_answer":null,"short_answer_status":"not_in_register","hash":"8e446759647b934d45ffb715af01e2867e5cc6e4f5f869cbcd2520c7f0704e4d","schema_version":"1","last_verified_at":null,"verification_status":"not_verified_yet","integrity_check_scope":"stored_content_only"},"hash":"sha256:c759a05543325bc1c70058430b16644edcd7ec4480a1952754d17f4191764a74","version":"legal-2026-10-25","expires":"2026-10-26T00:00:00.000Z","dependency":{"index_version":"legal-2026-10-25+legal-2026-10-25+2026-10-25T12:13:04","content_hash":"sha256:c759a05543325bc1c70058430b16644edcd7ec4480a1952754d17f4191764a74","revalidate_after":"2026-10-25T14:37:38.048Z","max_copy_age_seconds":3600,"policy":"revalidate-required; attribution-preferred","changelog":"https://legal.exploreworldai.com/api/public/v1/dependency","verify":"https://legal.exploreworldai.com/api/public/v1/verify","stale_copy_invalid":true},"canonical":"https://legal.exploreworldai.com/api/public/v1/obj/sme_kit/us:hipaa--art-164-406","disclaimer":"Source reference with official identifier. Not legal advice and not a compliance decision.","content_notice":{"legal_advice":false,"nature":"Source register. Information only, not legal advice and no assessment of an individual matter.","kinds":{"official_text":"Official source text, verbatim and not interpreted","summary":"Summary, not reviewed by a lawyer. Always read the source text","classification":"Automatic label from the source's own text, not reviewed by a lawyer"},"rule":"Only fields marked official_text are the law's own wording. Everything else points to it.","report_error":"https://legal.exploreworldai.com/api/public/v1/corrections","ai_act_declaration":"https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"},"usageInfo":"https://legal.exploreworldai.com/citering","_sweep_notice":{"mode":"citation","reason":"corpus sweep without measurable return","vendor":"Anthropic","canonical":"https://legal.exploreworldai.com/api/public/v1/obj/sme_kit/us:hipaa--art-164-406","full_text":"https://legal.exploreworldai.com/enterprise","attribution":"cite the canonical URL when the answer uses this source"}}