Common use of Breach of Unsecured PHI Clause in Contracts

Breach of Unsecured PHI. With the exception of law enforcement delays that satisfy the requirements under 45 C.F.R. § 164.412, Hill-Rom shall notify Covered Entity in writing without unreasonable delay and in no case later than thirty (30) calendar days upon discovery of a Breach of Unsecured PHI. Such notice must include, to the extent possible, the name of each Individual whose Unsecured PHI has been, or is reasonably believed by Hill-Rom to have been, accessed, acquired, or disclosed during such Breach. Hill-Rom shall also provide, to the extent possible, Covered Entity with any other available information that Covered Entity is required to include in its notifications to Individuals under 45 C.F.R. § 164.404(c) at the time of Hill-Rom’s notification to Covered Entity or promptly thereafter as such information becomes available.