Business Associate’s Insurance and Notification Costs i. Business Associate shall bear all costs of a Breach response including, without limitation, notifications, and shall maintain insurance to cover:
A. loss of PHI data;
B. Breach notification requirements specified in HIPAA Rules and in §00-00-000, C.R.S.; and
C. claims based upon alleged violations of privacy rights through improper use or disclosure of PHI.
ii. All such policies shall meet or exceed the minimum insurance requirements of the Contract or otherwise as may be approved by Covered Entity (e.g., occurrence basis, combined single dollar limits, annual aggregate dollar limits, additional insured status, and notice of cancellation).
iii. Business Associate shall provide Covered Entity a point of contact who possesses relevant Information Security knowledge and is accessible 24 hours per day, 7 days per week to assist with incident handling.
iv. Business Associate, to the extent practicable, shall mitigate any harmful effect known to Business Associate of a Use or Disclosure of PHI by Business Associate in violation of this Agreement.
Business Associate’s Insurance and Notification Costs i. Business Associate shall bear all costs of a Breach response including, without limitation, notifications, and shall maintain insurance to cover:
(1) loss of PHI data;
(2) Breach notification requirements specified in HIPAA Rules and in §00-00-000,
Business Associate’s Insurance and Notification Costs i. Business Associate shall bear all costs of a Breach response including, without limitation,
A. loss of PHI data;
B. Breach notification requirements specified in HIPAA Rules and in §00-00-000, C.R.S.; and
C. claims based upon alleged violations of privacy rights through improper use or disclosure of PHI.
ii. All such policies shall meet or exceed the minimum insurance requirements of the Contract or otherwise as may be approved by Covered Entity (e.g., occurrence basis, combined single dollar limits, annual aggregate dollar limits, additional insured status, and notice of cancellation).
iii. Business Associate shall provide Covered Entity a point of contact who possesses relevant Information Security knowledge and is accessible 24 hours per day, 7 days per week to assist with incident handling.
iv. Business Associate, to the extent practicable, shall mitigate any harmful effect known to Business Associate of a Use or Disclosure of PHI by Business Associate in violation of this Agreement.
Business Associate’s Insurance and Notification Costs. Business Associate shall bear all costs of a Breach response including, without limitation, notifications, and shall maintain insurance to cover:
Business Associate’s Insurance and Notification Costs i. Where a Breach is proximately and solely caused by Business Associate’s failure to comply with the terms of this Agreement, Business Associate shall bear costs of a Breach response including, without limitation, notifications, subject to liability limits in this Agreement. Business Associate shall maintain, at its own expense cyber liability coverage (or its equivalent) as set forth in Exhibit A (State Specific Terms) Section 12.D.
ii. Business Associate shall provide Covered Entity acess to a technical support team accessible 24 hours per day, 7 days per week to assist with incident handling if and as applicable.
iii. Business Associate, to the extent practicable, shall mitigate any harmful effect known to Business Associate of a Use or Disclosure of PHI by Business Associate in violation of this Agreement.
