Discovery of a Violation. The Business Associate must inform the Covered Entity by telephone call, plus email or fax, within the next business day following the discovery of any violation.
Discovery of a Violation. The Business Associate must inform the Covered Entity by telephone call, plus email or fax, within five business days following the discovery of any violation. The Violation shall be treated as “discovered” as of the first day on which the Violation is known to the Business Associate or, by exercising reasonable diligence would have been known to the Business Associate. Notification shall be provided to one of the contact persons as listed in section 4.d. Notification shall occur within five business days that follows discovery of the Violation.
Discovery of a Violation. The Business Associate must inform the Covered Entity by telephone call, plus email or fax, within the next business day following the discovery of any violation. The Violation shall be treated as “discovered” as of the first day on which the Violation is known to the Business Associate or, by exercising reasonable diligence would have been known to the Business Associate. Notification shall be provided to one of the contact persons as listed in section 4.d. Notification shall occur within the first business day that follows discovery of the Violation. Mitigation. The Business Associate shall take immediate steps to mitigate any harmful effects of the unauthorized use, disclosure, or loss. The Business Associate shall reasonably cooperate with the Covered Entity’s efforts to seek appropriate injunctive relief or otherwise prevent or curtail such threatened or actual breach, or to recover its Protected Health Information, including complying with a reasonable Corrective Action Plan.
Discovery of a Violation. If the use or disclosure amounts to a breach of unsecured PHI, Business Associate shall ensure its report is made to Covered Entity’s Breach Investigation Team (BIT) via email at xxxxxxxxx@xx.xxx immediately upon becoming aware of the Breach, and in no case later than ten (10) business days after discovery. The Violation shall be treated as “discovered” on the first day which the Violation is known to the Business Associate or, by exercising reasonable diligence would have been known to the Business Associate. For purposes of clarification of this Section, Business Associate must notify Covered Entity of an incident involving the acquisition, access, use, or disclosure of PHI in a manner not permitted under 45 CFR Part E within ten (10) business days after an incident even if Business Associate has not conclusively determined within that time that the incident constitutes a Breach as defined by HIPAA.
