45 C.F.R. § 150.213 Form and content of notice.
Title 45 - Public Welfare
The notice provided to the State is in writing and does the following: (a) Identifies the HIPAA requirement or requirements that have allegedly not been substantially enforced. (b) Describes the factual basis for the allegation of a failure or failures to enforce HIPAA requirements. (c) Explains that the consequence of a State's failure to substantially enforce HIPAA requirements is that CMS enforces them. (d) Advises the State that it has 30 days from the date of the notice to respond, unless the time for response is extended as described in §150.215 of this subpart. The State's response should include any information that the State wishes CMS to consider in making the preliminary determination described in §150.217.
Title 45: Public Welfare
PART 150—CMS ENFORCEMENT IN GROUP AND INDIVIDUAL INSURANCE MARKETS
Subpart B—CMS Enforcement Processes for Determining Whether States Are Failing To Substantially Enforce HIPAA Requirements
§ 150.213 Form and content of notice.

