Common use of Breach of Unsecured Protected Health Information Clause in Contracts

Breach of Unsecured Protected Health Information. We shall provide you notice of a Breach of Unsecured PHI within five (5) business days of the first day the Breach is known, or reasonably should have been known, to us, including for this purpose any employee, officer, or other agent of ours (other than the individual committing the Breach). The notice shall include, to the extent possible, the identification of each Individual whose Unsecured PHI was, or is reasonably believed to have been, subject to the Breach and the circumstances of the Breach, as both are known to us at that time. To the extent possible, the description of the circumstances of the Breach shall include: (1) a brief description of what happened, including the date of the Breach and the date of the discovery of the Breach; (2) a description of the types of Unsecured PHI that were involved in the Breach; and (3) a brief description of what we are doing to investigate the Breach, to mitigate harm to Individuals, and to protect against any further Breaches. Following the notice to you, we shall conduct such further investigation and analysis as is reasonably required and shall promptly supplement the information provided pursuant to (1) – (3) herein, previously provided.

Breach of Unsecured Protected Health Information. We shall provide you notice of a Breach of Unsecured PHI within five (5) business days of the first day the Breach is known, or reasonably should have been known, to us, including for this purpose any employee, officer, or other agent of ours (other than the individual committing the Breach). The notice shall include, to the extent possible, the identification of each Individual whose Unsecured PHI was, or is reasonably believed to have been, subject to the Breach and the circumstances of the Breach, as both are known to us at that time. To the extent possible, the description of the circumstances of the Breach shall include: : (1) a brief description of what happened, including the date of the Breach and the date of the discovery of the Breach; (2) a description of the types of Unsecured PHI that were involved in the Breach; and (3) a brief description of what we are doing to investigate the Breach, to mitigate harm to Individuals, and to protect against any further Breaches. Following the notice to you, we shall conduct such further investigation and analysis as is reasonably required and shall promptly supplement the information provided pursuant to (1) – (3) herein, previously provided.