BREACH DISCOVERY AND NOTIFICATION. 17 1. Following the discovery of a Breach of Unsecured PHI, CONTRACTOR shall notify 18 COUNTY of such Breach, however both parties agree to a delay in the notification if so advised by a 19 law enforcement official pursuant to 45 CFR § 164.412.
20 a. A Breach shall be treated as discovered by CONTRACTOR as of the first day on which 21 such Breach is known to CONTRACTOR or, by exercising reasonable diligence, would have been 22 known to CONTRACTOR.
23 b. CONTRACTOR shall be deemed to have knowledge of a Breach, if the Breach is 24 known, or by exercising reasonable diligence would have known, to any person who is an employee, 25 officer, or other agent of CONTRACTOR, as determined by federal common law of agency.
26 2. CONTRACTOR shall provide the notification of the Breach immediately to the COUNTY 27 Privacy Officer. CONTRACTOR’s notification may be oral, but shall be followed by written 28 notification within twenty four (24) hours of the oral notification.
29 3. CONTRACTOR’s notification shall include, to the extent possible:
30 a. The identification of each Individual whose Unsecured PHI has been, or is reasonably 31 believed by CONTRACTOR to have been, accessed, acquired, used, or disclosed during the Breach;
32 b. Any other information that COUNTY is required to include in the notification to 33 Individual under 45 CFR §164.404 (c) at the time CONTRACTOR is required to notify COUNTY or 34 promptly thereafter as this information becomes available, even after the regulatory sixty (60) day 35 period set forth in 45 CFR § 164.410 (b) has elapsed, including:
36 1) A brief description of what happened, including the date of the Breach and the date 37 of the discovery of the Breach, if known;
1 2) A description of the types of Unsecured PHI that were involved in the Breach (such 2 as whether full name, social security number, date of birth, home address, account number, diagnosis, 3 disability code, or other types of information were involved);
4 3) Any steps Individuals should take to protect themselves from potential harm 5 resulting from the Breach;
6 4) A brief description of what CONTRACTOR is doing to investigate the Breach, to 7 mitigate harm to Individuals, and to protect against any future Breaches; and
8 5) Contact procedures for Individuals to ask questions or learn additional information, 9 which shall include a toll-free telephone number, an e-mail address, Web site, or postal address.
10 4. COUNTY may require CONTRACTOR to provide notice to th...
BREACH DISCOVERY AND NOTIFICATION. 1. Following the discovery of a Breach of Unsecured PHI, Contractor shall notify County of such Breach, however both Parties agree to a delay in the notification if so advised by a law enforcement official pursuant to 45 CFR § 164.412.
a. A Breach shall be treated as discovered by Contractor as of the first day on which such Breach is known to Contractor or, by exercising reasonable diligence, would have been known to Contractor.
b. Contractor shall be deemed to have knowledge of a Breach, if the Breach is known, or by exercising reasonable diligence would have known, to any person who is an employee, officer, or other agent of Contractor, as determined by federal common law of agency.
2. Contractor shall provide the notification of the Breach immediately to the County Privacy Officer. Contractor’s notification may be oral, but shall be followed by written notification within 24 hours of the oral notification. Xxxxxx Xxxxxxx, Chief Information Security Officer OCIT – Enterprise Privacy & Cybersecurity 0000 X. Xx. Xxxxxxx Xxxxx Santa Ana, CA 00000 (000) 000-0000 Xxxxxx.Xxxxxxx@xxxx.xxxxx.xxx Xxxxx Xx, County Privacy Officer, CHPC, CHC, CHP OCIT – Enterprise Privacy and Cybersecurity 0000 X. Xx. Xxxxxxx Xxxxx Santa Ana, CA 00000 (000) 000-0000 Xxxxx.xx@xxxx.xxxxx.xxx xxxxxxxxxxxxxx@xxxxx.xxx
3. Contractor’s notification shall include, to the extent possible:
a. The identification of each Individual whose Unsecured PHI has been, or is reasonably believed by Contractor to have been, accessed, acquired, used, or disclosed during the Breach;
b. Any other information that County is required to include in the notification to Individual under 45 CFR §164.404 (c) at the time Contractor is required to notify County or promptly thereafter as this information becomes available, even after the regulatory sixty (60) day period set forth in 45 CFR § 164.410 (b) has elapsed, including:
(1) A brief description of what happened, including the date of the Breach and the date of the discovery of the Breach, if known;
(2) A description of the types of Unsecured PHI that were involved in the Breach (such as whether full name, social security number, date of birth, home address, account number, diagnosis, disability code, or other types of information were involved);
(3) Any steps Individuals should take to protect themselves from potential harm resulting from the Breach;
(4) A brief description of what Contractor is doing to investigate the Breach, to mitigate harm to Individual...
BREACH DISCOVERY AND NOTIFICATION. 23 1. Following the discovery of a Breach of Unsecured PHI, CONTRACTOR shall notify 24 COUNTY of such Breach, however both parties agree to a delay in the notification if so advised by a 25 law enforcement official pursuant to 45 CFR § 164.412.
26 a. A Breach shall be treated as discovered by CONTRACTOR as of the first day on which 27 such Breach is known to CONTRACTOR or, by exercising reasonable diligence, would have been 28 known to CONTRACTOR.
29 b. CONTRACTOR shall be deemed to have knowledge of a Breach, if the Breach is 30 known, or by exercising reasonable diligence would have known, to any person who is an employee, 31 officer, or other agent of CONTRACTOR, as determined by federal common law of agency.
32 2. CONTRACTOR shall provide the notification of the Breach immediately to the COUNTY 33 Privacy Officer. CONTRACTOR’s notification may be oral, but shall be followed by written 34 notification within 24 hours of the oral notification.
35 3. CONTRACTOR’s notification shall include, to the extent possible:
36 a. The identification of each Individual whose Unsecured PHI has been, or is reasonably 37 believed by CONTRACTOR to have been, accessed, acquired, used, or disclosed during the Breach;
BREACH DISCOVERY AND NOTIFICATION. 23 1. Following the discovery of a Breach of Unsecured PHI, CONTRACTOR shall notify 24 COUNTY of such Breach, however both parties agree to a delay in the notification if so advised by a 25 law enforcement official pursuant to 45 CFR § 164.412.
BREACH DISCOVERY AND NOTIFICATION. 5.01 Following the discovery of a Breach of Unsecured PHI, CONTRACTOR shall notify CITY of such Breach, however, both parties may agree to a delay in the notification if so advised by a law enforcement official pursuant to 45 CFR §164.412.
5.01.1 A Breach shall be treated as discovered by CONTRACTOR as of the first day on which such Breach is known to CONTRACTOR or, by exercising reasonable diligence, would have been known to CONTRACTOR.
5.01.2 CONTRACTOR shall be deemed to have knowledge of a Breach, if the Breach is known, or by exercising reasonable diligence would have been known, to any person who is an employee, officer, or other agent of CONTRACTOR, as determined by the federal common law of agency.
5.02 CONTRACTOR shall provide the notification of the Breach immediately to the CITY DEH Executive Director or other designee.
5.02.1 CONTRACTOR'S initial notification may be oral, but shall be followed by written notification within 24 hours of the oral notification.
5.03 CONTRACTOR'S notification shall include, to the extent possible:
BREACH DISCOVERY AND NOTIFICATION. 25 1. Following the discovery of a Breach of Unsecured PHI, CONTRACTOR shall notify 26 COUNTY of such Breach, however both parties agree to a delay in the notification if so advised by a law 27 enforcement official pursuant to 45 CFR § 164.412.
28 a. A Breach shall be treated as discovered by CONTRACTOR as of the first day on which 29 such Breach is known to CONTRACTOR or, by exercising reasonable diligence, would have been 30 known to CONTRACTOR.
31 b. CONTRACTOR shall be deemed to have knowledge of a Breach, if the Breach is 32 known, or by exercising reasonable diligence would have known, to any person who is an employee, 33 officer, or other agent of CONTRACTOR, as determined by federal common law of agency.
34 2. CONTRACTOR shall provide the notification of the Breach immediately to the COUNTY 35 Privacy Officer. CONTRACTOR’s notification may be oral, but shall be followed by written
BREACH DISCOVERY AND NOTIFICATION. 25 1. Following the discovery of a Breach of Unsecured PHI, CONTRACTOR shall notify
28 a. A Breach shall be treated as discovered by CONTRACTOR as of the first day on which
31 b. CONTRACTOR shall be deemed to have knowledge of a Breach, if the Breach is
34 2. CONTRACTOR shall provide the notification of the Breach immediately to the COUNTY
37 3. CONTRACTOR’s notification shall include, to the extent possible:
1 a. The identification of each Individual whose Unsecured PHI has been, or is reasonably
3 b. Any other information that COUNTY is required to include in the notification to
7 1) A brief description of what happened, including the date of the Breach and the date
9 2) A description of the types of Unsecured PHI that were involved in the Breach (such
12 3) Any steps Individuals should take to protect themselves from potential harm
14 4) A brief description of what CONTRACTOR is doing to investigate the Breach, to
16 5) Contact procedures for Individuals to ask questions or learn additional information,
18 4. COUNTY may require CONTRACTOR to provide notice to the Individual as required in
21 5. In the event that CONTRACTOR is responsible for a Breach of Unsecured PHI in violation
26 6. CONTRACTOR shall maintain documentation of all required notifications of a Breach or
28 7. CONTRACTOR shall provide to COUNTY all specific and pertinent information about the
33 8. CONTRACTOR shall continue to provide all additional pertinent information about the
BREACH DISCOVERY AND NOTIFICATION. 25 1. Following the discovery of a Breach of Unsecured PHI, CONTRACTOR shall notify
28 a. A Breach shall be treated as discovered by CONTRACTOR as of the first day on which
31 b. CONTRACTOR shall be deemed to have knowledge of a Breach, if the Breach is
34 2. CONTRACTOR shall provide the notification of the Breach immediately to the COUNTY
BREACH DISCOVERY AND NOTIFICATION. 11 1. Following the discovery of a Breach of Unsecured PHI, CONTRACTOR shall notify
14 a. A Breach shall be treated as discovered by CONTRACTOR as of the first day on which
17 b. CONTRACTOR shall be deemed to have knowledge of a Breach, if the Breach is
20 2. CONTRACTOR shall provide the notification of the Breach immediately to the COUNTY
23 3. CONTRACTOR’s notification shall include, to the extent possible:
24 a. The identification of each Individual whose Unsecured PHI has been, or is reasonably
26 b. Any other information that COUNTY is required to include in the notification to
30 1) A brief description of what happened, including the date of the Breach and the date
32 2) A description of the types of Unsecured PHI that were involved in the Breach (such
35 3) Any steps Individuals should take to protect themselves from potential harm
37 4) A brief description of what CONTRACTOR is doing to investigate the Breach, to
2 5) Contact procedures for Individuals to ask questions or learn additional information,
4 4. COUNTY may require CONTRACTOR to provide notice to the Individual as required in
BREACH DISCOVERY AND NOTIFICATION. 9 1. Following the discovery of a Breach of Unsecured PHI, CONTRACTOR shall notify 10 COUNTY of such Breach, however both parties agree to a delay in the notification if so advised by a 11 law enforcement official pursuant to 45 CFR § 164.412.
12 a. A Breach shall be treated as discovered by CONTRACTOR as of the first day on which 13 such Breach is known to CONTRACTOR or, by exercising reasonable diligence, would have been 14 known to CONTRACTOR.
15 b. CONTRACTOR shall be deemed to have knowledge of a Breach, if the Breach is 16 known, or by exercising reasonable diligence would have known, to any person who is an employee, 17 officer, or other agent of CONTRACTOR, as determined by federal common law of agency.
18 2. CONTRACTOR shall provide the notification of the Breach immediately to the COUNTY 19 Privacy Officer. CONTRACTOR’s notification may be oral, but shall be followed by written 20 notification within twenty four (24) hours of the oral notification.
21 3. CONTRACTOR’s notification shall include, to the extent possible:
22 a. The identification of each Individual whose Unsecured PHI has been, or is reasonably 23 believed by CONTRACTOR to have been, accessed, acquired, used, or disclosed during the Breach;
24 b. Any other information that COUNTY is required to include in the notification to 25 Individual under 45 CFR §164.404 (c) at the time CONTRACTOR is required to notify COUNTY or 26 promptly thereafter as this information becomes available, even after the regulatory sixty (60) day 27 period set forth in 45 CFR § 164.410 (b) has elapsed, including:
