Common use of Discovery of Breach Clause in Contracts

Discovery of Breach. To notify County immediately by telephone call plus email upon the discovery of breach of security of PHI in computerized form if the PHI was, or is reasonably believed to have been, acquired by an unauthorized person, or within twenty-four (24) hours by email of any suspected security incident, intrusion or unauthorized use or disclosure of PHI in violation of this Agreement and this Addendum, or potential loss of confidential data affecting this Agreement. Notification shall be provided to the County Compliance Manager. If the incident occurs after business hours or on a weekend or holiday and involves electronic PHI, notification shall be provided using the “Privacy Incident Reporting Form” located at the following web address: xxxxx://xxx.xxxx.xx.xxx/formsandpubs/laws/priv/Documents/Privacy- Incident-Report-PIR.pdf Business Associate shall take:

Discovery of Breach. To notify County immediately by telephone call plus email or fax upon the discovery of breach of security of PHI in computerized form if the PHI was, or is reasonably believed to have been, acquired by an unauthorized person, or within twenty-four (24) 24 hours by email or fax of any suspected security incident, intrusion or unauthorized use or disclosure of PHI in violation of this Agreement and this Addendum, or potential loss of confidential data affecting this Agreement. Notification shall be provided to the County Compliance Manager. If the incident occurs after business hours or on a weekend or holiday and involves electronic PHI, notification shall be provided using the “Privacy Incident Reporting Form” located at the following web address: xxxxx://xxx.xxxx.xx.xxx/formsandpubs/laws/priv/Documents/Privacy- Incident-Report-PIR.pdf Business Associate shall take:

Discovery of Breach. To notify County immediately by telephone call plus email upon the discovery of breach of security of PHI in computerized form if the PHI was, or is reasonably believed to have been, acquired by an unauthorized person, or within twenty-four (24) hours by email of any suspected security incident, intrusion or unauthorized use or disclosure of PHI in violation of this Agreement and this Addendum, or potential loss of confidential data affecting this Agreement. Notification shall be provided to the County Compliance Manager. If the incident occurs after business hours or on a weekend or holiday and involves electronic PHI, notification shall be provided using the “Privacy Incident Reporting Form” located at the following web address: xxxxx://xxx.xxxx.xx.xxx/formsandpubs/laws/priv/Documents/Privacy- Incident-Report-PIR.pdf xxxxx://xxx.xxxx.xx.xxx/formsandpubs/laws/priv/Documents/Privacy-Incident- Report-PIR.pdf Business Associate shall take:

Discovery of Breach. To notify County immediately by telephone call plus email upon the discovery of breach of security of PHI in computerized form if the PHI was, or is reasonably believed to have been, acquired by an unauthorized person, or within twenty-four (24) hours by email of any suspected security incident, intrusion or unauthorized use or disclosure of PHI in violation of this Agreement and this Addendum, or potential loss of confidential data affecting this Agreement. Notification shall be provided to the County Compliance Manager. If the incident occurs after business hours or on a weekend or holiday and involves electronic PHI, notification shall be provided using the “Privacy Incident Reporting Form” located at the following web address: xxxxx://xxx.xxxx.xx.xxx/formsandpubs/laws/priv/Documents/Privacy- Incident-Report-PIR.pdf xxxxx://xxx.xxxx.xx.xxx/formsandpubs/laws/priv/Documents/Privacy-Incident-Report- PIR.pdf Business Associate shall take:

Discovery of Breach. To notify County immediately by telephone call plus email upon the discovery of breach of security of PHI in computerized form if the PHI was, or is reasonably believed to have been, acquired by an unauthorized person, or within twenty-four (24) hours by email of any suspected security incident, intrusion or unauthorized use or disclosure of PHI in violation of this Agreement and this Addendum, or potential loss of confidential data affecting this Agreement. Notification shall be provided to the County Compliance Manager. If the incident occurs after business hours or on a weekend or holiday and involves electronic PHI, notification shall be provided using the “Privacy Incident Reporting Form” located at the following web address: xxxxx://xxx.xxxx.xx.xxx/formsandpubs/laws/priv/Documents/Privacy- Incident-Report-PIR.pdf xxxxx://xxx.xxxx.xx.xxx/formsandpubs/laws/priv/Documents/Privacy-Incident-Report-PIR.pdf Business Associate shall take:

Discovery of Breach. To notify County immediately by telephone call plus email or fax upon the discovery of breach of security of PHI in computerized form if the PHI was, or is reasonably believed to have been, acquired by an unauthorized person, or within twenty-four (24) hours by email or fax of any suspected security incident, intrusion or unauthorized use or disclosure of PHI in violation of this Agreement and this Addendum, or potential loss of confidential data affecting this Agreement. Notification shall be provided to the County Compliance Manager. If the incident occurs after business hours or on a weekend or holiday and involves electronic PHI, notification shall be provided using the “Privacy Incident Reporting Form” located at the following web address: xxxxx://xxx.xxxx.xx.xxx/formsandpubs/laws/priv/Documents/Privacy- Incident-Report-PIR.pdf Business Associate shall take:

Discovery of Breach. To notify County immediately by telephone call plus email or fax upon the discovery of breach of security of PHI in computerized form if the PHI was, or is reasonably believed to have been, acquired by an unauthorized person, or within twenty-four (24) 24 hours by email or fax of any suspected security incident, intrusion or unauthorized use or disclosure of PHI in violation of this Agreement and this Addendum, or potential loss of confidential data affecting this Agreement. Notification shall be provided to the County Compliance ManagerOfficer. If the incident occurs after business hours or on a weekend or holiday and involves electronic PHI, notification shall be provided using the “Privacy Incident Reporting Form” located at the following web address: xxxxx://xxx.xxxx.xx.xxx/formsandpubs/laws/priv/Documents/Privacy- Incident-Report-PIR.pdf xxxx://xxx.xxxx.xx.xxx/formsandpubs/laws/priv/Pages/DHCSBusinessAssoci atesOnly.aspx Business Associate shall take:

Discovery of Breach. To notify County immediately by telephone call plus email or fax upon the discovery of breach of security of PHI in computerized form if the PHI was, or is reasonably believed to have been, acquired by an unauthorized person, or within twenty-four (24) 24 hours by email or fax of any suspected security incident, intrusion or unauthorized use or disclosure of PHI in violation of this Agreement and this Addendum, or potential loss of confidential data affecting this Agreement. Notification shall be provided to the County Compliance Manager. If the incident occurs after business hours or on a weekend or holiday and involves electronic PHI, notification shall be provided using the “Privacy Incident Reporting Form” located at the following web address: xxxxx://xxx.xxxx.xx.xxx/formsandpubs/laws/priv/Documents/Privacy- Incident-Report-PIR.pdf xxxx://xxx.xxxx.xx.xxx/formsandpubs/laws/priv/Pages/DHCSBusinessAssoci atesOnly.aspx Business Associate shall take: