164.308(a)(7) Contingency Plan

Establish (and implement as needed) policies and procedures for responding to an emergency or other occurrence (for example, fire, vandalism, system failure, and natural disaster) that damages systems that contain electronic health information.

Implementation Specification Description
164.308(a)(7)(ii)(A) Data Backup Plan (Required)

Establish and implement procedures to create and maintain retrievable exact copies of electronic protected health information.
164.308(a)(7)(ii)(B) Disaster Recovery Plan (Required)

Establish (and implement as needed) procedures to restore any loss of data.
164.308(a)(7)(ii)(C) Emergency Mode Operational Plan (Required)

Establish (and implement as needed) procedures to enable continuation of critical business processes for protection of the security of electronic protected health information while operating in emergency mode.
164.308(a)(7)(ii)(D) Testing and Revision Procedures (Addressable)

Implement procedures for periodic testing and revision of contingency plans.