Common use of Complete Report Clause in Contracts

Complete Report. To provide a complete report of the investigation to Covered Entity and the DHCS Information Protection Unit within ten (10) working days of the discovery of the breach or unauthorized use or disclosure. The report to DHCS shall be submitted on the “Privacy Incident Report” form and shall include an assessment of all known factors relevant to a determination of whether a breach occurred. The report shall also include a full, detailed corrective action plan, including information on measures that were taken to halt and/or contain the improper use or disclosure. If DHCS requests information in addition to that listed on the “Privacy Incident Report” form, Business Associate shall make reasonable efforts to provide Covered Entity or DHCS, as applicable, with such information. If, because of the circumstances of the incident, Business Associate needs more than ten (10) working days from the discovery to submit a complete report, the DHCS may grant a reasonable extension of time, in which case Business Associate shall submit periodic updates until the complete report is submitted. If necessary, a Supplemental Report may be used to submit revised or additional information after the completed report is submitted, by submitting the revised or additional information on an updated “Privacy Incident Report” form. DHCS will review and approve the determination of whether a breach occurred and whether individual notifications and a corrective action plan are required.

Complete Report. To provide a complete report of the investigation to Covered Entity the Department Program Contract Manager and the DHCS Department Information Protection Unit Security Officer within ten (10) working days of the discovery of the breach or unauthorized use or disclosure. The report to DHCS shall be submitted on the “Privacy Incident Report” form and shall include an assessment of all known factors relevant to a determination of whether a breach occurred. The report shall also include a full, detailed corrective action plan, including information on measures that were taken to halt and/or contain the improper use or disclosure. If DHCS the Department requests information in addition to that listed on the “Privacy Incident Report” form, Business Associate Contractor shall make reasonable efforts to provide Covered Entity or DHCS, as applicable, the Department with such information. If, because of the circumstances of the incident, Business Associate Contractor needs more than ten (10ten(10) working days from the discovery to submit a complete report, the DHCS Department may grant a reasonable extension of time, in which case Business Associate Contractor shall submit periodic updates until the complete report is submitted. If necessary, a Supplemental Report may be used to submit revised or additional information after the completed report is submitted, by submitting the revised or additional information on an updated “Privacy Incident Report” form. DHCS The Department will review and approve the determination of whether a breach occurred and whether individual notifications are required, and a the corrective action plan are requiredplan.

Complete Report. To provide a complete report of the investigation to Covered Entity and the DHCS Information Protection Unit within ten (10) working days of the discovery of the breach or unauthorized use or disclosure. The report to DHCS shall be submitted on the “Privacy Incident Report” form and shall include an assessment of all known factors relevant to a determination of whether a breach occurred. The report shall also include a full, detailed corrective action plan, including information on measures that were taken to halt and/or contain the improper use or disclosure. If DHCS requests information in addition to DocuSign Envelope ID: 60D631A0-608E-459B-A3E0-1F738BA81326 Agreement No.:1150-BAA-2022-SK Siskiyou County February 25, 2022 that listed on the “Privacy Incident Report” form, Business Associate shall make reasonable efforts to provide Covered Entity or DHCS, as applicable, with such information. If, because of the circumstances of the incident, Business Associate needs more than ten (10) working days from the discovery to submit a complete report, the DHCS may grant a reasonable extension of time, in which case Business Associate shall submit periodic updates until the complete report is submitted. If necessary, a Supplemental Report may be used to submit revised or additional information after the completed report is submitted, by submitting the revised or additional information on an updated “Privacy Incident Report” form. DHCS will review and approve the determination of whether a breach occurred and whether individual notifications and a corrective action plan are required.

Complete Report. To provide a complete report of the investigation to Covered Entity the Department Program Contract Manager and the DHCS Information Protection Unit within ten (10) working days of the discovery of the breach or unauthorized use or disclosure. The report to DHCS shall be submitted on the “Privacy Incident Report” form and shall include an assessment of all known factors relevant to a determination of whether a breach occurred. The report shall also include a full, detailed corrective action plan, including information on measures that were taken to halt and/or contain the improper use or disclosure. If DHCS the Department requests information in addition to that listed on the “Privacy Incident Report” form, Business Associate Contractor shall make reasonable efforts to provide Covered Entity or DHCS, as applicable, the Department with such information. If, because of the circumstances of the incident, Business Associate Contractor needs more than ten (10) working days from the discovery to submit a complete report, the DHCS Department may grant a reasonable extension of time, in which case Business Associate Contractor shall submit periodic updates until the complete report is submitted. If necessary, a Supplemental Report may be used to submit revised or additional information after the completed report is submitted, by submitting the revised or additional information on an updated “Privacy Incident Report” form. DHCS The Department will review and approve the determination of whether a breach occurred and whether individual notifications and a corrective action plan are required.required.‌