[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-seo-360226-105":53,"doc-detail-360226-en":126},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":54,"data":55},"ok",{"site_id":56,"language":57,"slug":58,"title":59,"keywords":60,"description":61,"schema_data":62,"social_meta":119,"head_meta":121,"extra_data":123,"updated_unix":125},105,"en","corrective-action-follow-up-letter","Corrective Action Follow up Letter","","Centers for Medicare & Medicaid Services issues a Corrective Action follow-up letter to a covered entity regarding HIPAA violations identified during a 2017 assessment. The letter explains that no Corrective Action Plan (CAP), or completed CAP, has been received to date and instructs the recipient to submit a completed CAP by a specified deadline. It provides submission addresses and warns that failure may lead to civil money penalties, with contact details and PRA paperwork-reduction statements included.",{"@graph":63,"@context":118},[64,80,101],{"@type":65,"itemListElement":66},"BreadcrumbList",[67,71,74,77],{"item":68,"name":69,"@type":70,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":72,"name":10,"@type":70,"position":73},"https://docshare.wps.com/template/",2,{"item":75,"name":41,"@type":70,"position":76},"https://docshare.wps.com/template/letters/",3,{"item":78,"name":59,"@type":70,"position":79},"https://docshare.wps.com/template/corrective-action-follow-up-letter/360226/",4,{"url":78,"name":59,"@type":81,"image":82,"author":87,"headline":59,"publisher":90,"fileFormat":93,"inLanguage":57,"description":61,"dateModified":94,"datePublished":95,"encodingFormat":93,"isAccessibleForFree":96,"interactionStatistic":97},"DigitalDocument",{"url":83,"@type":84,"width":85,"height":86},"https://docshare.wps.com/thumbnails/corrective-action-follow-up-letter/360226.png","ImageObject",442,249,{"name":88,"@type":89},"Mary Man","Person",{"url":68,"name":91,"@type":92},"DocShare","Organization","application/pdf","2026-10-12","2026-09-23",true,{"@type":98,"interactionType":99,"userInteractionCount":79},"InteractionCounter",{"@type":100},"ViewAction",{"@type":102,"mainEntity":103},"FAQPage",[104,110,114],{"name":105,"@type":106,"acceptedAnswer":107},"What is the purpose of this Corrective Action follow-up letter?","Question",{"text":108,"@type":109},"It follows up on HIPAA violations identified during a covered entity assessment and requests a completed Corrective Action Plan (CAP) addressing those violations.","Answer",{"name":111,"@type":106,"acceptedAnswer":112},"By when must the recipient submit the completed CAP?",{"text":113,"@type":109},"The letter specifies a deadline in the format (month, day, year) for submitting the completed CAP.",{"name":115,"@type":106,"acceptedAnswer":116},"What happens if a completed CAP is not provided?",{"text":117,"@type":109},"Failure to provide a completed CAP will be considered willful neglect and may result in the imposition of civil money penalties.","https://schema.org",{"og:url":78,"og:type":120,"og:title":59,"og:site_name":91,"og:description":61},"article",{"robots":122,"canonical":78},"index,follow",{"doc_id":124,"site_id":56},360226,1791484298,{"code":4,"msg":5,"data":127},{"doc_id":124,"user_id":128,"nickname":88,"user_avatar":129,"doc_module":9,"category_id":40,"category_name":41,"doc_title":59,"doc_description":61,"doc_content":130,"file_id":131,"file_url":132,"file_type":133,"file_size":134,"view_count":79,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":79,"language":135,"language_code":57,"site_id":56,"html_lang":57,"table_of_contents":136,"faqs":137,"seo_title":138,"seo_description":61,"update_tm":139,"read_time":73},7421720224475,"https://ap-avatar.wpscdn.com/davatar_276721f389ce27ea32af1340a28f341c","DEPARTMENT OF HEALTH & HUMAN SERVICES Centers for Medicare & Medicaid Services  \n7500 Security Boulevard, Mail Stop S2-26-17  \nBaltimore, Maryland 21244-1850  \nCorrective Action Follow up Letter  \nDate of Notice: FULLDATE  \nCONTACTNAME JOBTITLE CENAME ADDRESS1  \nADDRESS2 CITY, ST ZIP  \nRe: Corrective Action Number XXXXX  \nDear TITLE LASTNAME:  \nIn a Corrective Action notice dated (month, day, year), we informed you that the Department of Health and Human Services (HHS), Division of National Standards (DNS) within the Centers for Medicare & Medicaid Services’ (CMS), initiated a corrective action based on HIPAA violations discovered during the \u003CCovered Entity Name> 2017 assessment. In that notice, we requested that you provide a Corrective Action Plan (CAP) that addresses the violations by (month, day, year). To date, this office has not received a CAP, or a completed CAP, from \u003CCovered Entity Name> .  \nPlease submit a completed CAP by (month, day, year) to the HIPAA mailbox at [hipaacomplaint@cms.hhs.gov](hipaacomplaint@cms.hhs.gov), or submit it to the Division of National Standards, at:  \nCenters for Medicare & Medicaid Services HIPAA Enforcement  \nAttn: Division of National Standards  \nP.O. Box 8030  \nBaltimore, MD 21244-8030  \nFailure to provide a completed CAP will be considered willful neglect and may result in the imposition of civil money penalties.  \nIf you have any questions about this letter, please contact (contact name) at [contact_name@cms.hhs.gov](contact_name@cms.hhs.gov), or 555-555-5555. When contacting this office, please include the corrective action number located at the top of this letter.  \nSincerely,  \nMadhu Annadata, Director  \nDivision of National Standards  \nOffice of Information Technology  \ncc:  \nContact Name  \nIn accordance with the Paperwork Reduction Act (1995), no persons are required to respond to a collection of information, unless it displays a valid Office of Management and Budget (OMB) control number. The valid OMB control number for this information collection is 0938-XXXX (Expires XX/XX/XXXX) . The time required to complete this information collection is estimated to average [10 hours] per response (4 forms x 60 minutes/form), including the time to review instructions, search existing data resources, gather the data needed, and complete and review the information collection. If you have comments concerning the accuracy of the time estimate(s) or suggestions for improving this form, please write to:  \nCenters for Medicare & Medicaid Services  \nAttn: PRA Reports Clearance Officer, Mail Stop C4-26-05  \n7500 Security Boulevard  \nBaltimore, Maryland 21244-1850  \nPlease do not send applications, claims, payments, medical records or any documents containing sensitive information to the PRA Reports Clearance Office. Any correspondence not pertaining to the information collection burden approved under the associated OMB control number listed on this form will not be reviewed, forwarded, or retained. If you have questions or concerns regarding where to submit your documents, please contact: Cecily Austin at [cecily.austin@cms.hhs.gov](cecily.austin@cms.hhs.gov) or Kevin Stewart at [kevin.stewart@cms.hhs.gov](kevin.stewart@cms.hhs.gov) .  \nCAP Template  \n\n| Assessed Entity Name: | Submitted by (Name): | Phone Number: |\n| --- | --- | --- |\n| Corrective Action Number: | Submission Date: | Email Address: |\n\nViolation Description from Notice Root Cause of Violation (Optional) Notes/Comments  \n1.  \n2.  \n3.  \n\n| 4. |  |  |\n| --- | --- | --- |\n| 5. |  |  |\n| 6. |  |  |\n\n\n| Major Milestones | Planned Start Date | Planned\u003Cbr>Completion\u003Cbr>Date | Responsible Party or Position |\n| --- | --- | --- | --- |\n| Example: code updates | 01/01/17 | 01/10/17 | Developers |\n| 1. |  |  |  |\n| 2. |  |  |  |\n| 3. |  |  |  |\n| 4. |  |  |  |\n| 5. |  |  |  |\n| 6. |  |  |  |\n\n*For DNS Official Use Only*  \nAssessor 1 Signature:    \nAssessor 1  \nApproval Date:   Month Day Year","cbCaitOT0hg6hLIW","https://ap.wps.com/l/cbCaitOT0hg6hLIW","pdf",76512,"English","# Corrective Action Follow up Letter\n## Required submission of the completed CAP\n## Consequences of not submitting\n## Paperwork Reduction Act notice and PRA submission instructions\n## CAP Template sections\n### Violation and root-cause details\n### Major milestones and responsible parties","[{\"question\":\"What is the purpose of this Corrective Action follow-up letter?\",\"answer\":\"It follows up on HIPAA violations identified during a covered entity assessment and requests a completed Corrective Action Plan (CAP) addressing those violations.\"},{\"question\":\"By when must the recipient submit the completed CAP?\",\"answer\":\"The letter specifies a deadline in the format (month, day, year) for submitting the completed CAP.\"},{\"question\":\"What happens if a completed CAP is not provided?\",\"answer\":\"Failure to provide a completed CAP will be considered willful neglect and may result in the imposition of civil money penalties.\"}]","Corrective Action Follow up Letter | PDF",1790139102]