This form is to be used by the business to report any potential HIPAA or other Data/Privacy incidents so that the reported incident(s) can be investigated and undergo a risk analysis.