---
title: "List adverse-event facts before any letter to the patient"
url: "https://ailawframework.com/practice/health-and-medical-law/prepare-the-open-disclosure-plan-and-follow-up-letter-after-an-adverse-e/united-states"
type: "task_jurisdiction_version"
site: "AI Law Framework"
id: "A32-T20261018-14-US"
practice_area: "Health & Medical Law"
tier: "red"
lawyer_review: "required"
jurisdictions: ["US"]
last_reviewed: "2026-10-22"
---

# List adverse-event facts before any letter to the patient

> List the event date, the people the file names, and the documents. Do not write a letter to the patient and do not call the event a breach.

Canonical page: https://ailawframework.com/practice/health-and-medical-law/prepare-the-open-disclosure-plan-and-follow-up-letter-after-an-adverse-e/united-states  
Last reviewed: 2026-10-22

Site index for agents: https://ailawframework.com/llms.txt

## Key facts

| Fact | Value |
| --- | --- |
| Practice area | [Health & Medical Law](https://ailawframework.com/practice/health-and-medical-law.md) |
| Human involvement | Red: Lawyer writes; AI may check, clarify or collect data |
| How AI is used | List the event date, the people the file names, and the documents. Do not write a letter to the patient and do not call the event a breach. |
| What the lawyer must review | You write any letter. No open-disclosure protocol was opened. Model Rule 1.4 tells you how to communicate with your own client. It is not a script for a letter to a patient. 45 CFR § 164.502(a) limits use and disclosure of protected health information. The HHS breach page says individual notice of a breach of unsecured protected health information must be provided without unreasonable delay and in no case later than 60 days following discovery, and that media notice is required when more than 500 residents of a State or jurisdiction are affected. A business associate notifies the covered entity. You do not treat every adverse clinical event as that breach. The page also describes exceptions and a risk assessment. You read those before you decide. Formal Opinion 512 applies to the chart. |
| Written for | United States |
| Applies to | [Prepare the open disclosure plan and follow-up letter after an adverse event](https://ailawframework.com/practice/health-and-medical-law/prepare-the-open-disclosure-plan-and-follow-up-letter-after-an-adverse-e.md) |

## Checking plan

- What the AI does: List the event date, the people the file names, and the documents. Do not write a letter to the patient and do not call the event a breach.
- Basis: Checked against the linked sources on 22 October 2026. Confirm the current instrument before reliance.

## Notes

- The 60-day period is for a breach of unsecured protected health information, as that page describes it.
- You write every sentence that the patient will receive.

## Sources

- [45 CFR § 164.502 (uses and disclosures of protected health information)](https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-C/part-164/subpart-E/section-164.502) (checked 2026-10-22)
- [HHS, Breach Notification Rule](https://www.hhs.gov/hipaa/for-professionals/breach-notification/index.html) (checked 2026-10-22)
- [ABA Model Rule 1.4, Communications](https://www.americanbar.org/groups/professional_responsibility/publications/model_rules_of_professional_conduct/rule_1_4_communications/) (checked 2026-10-22)

*Practice guidance for planning and review. Confirm current primary sources and the requirements of the actual matter. This is general information, not legal advice.*