Common use of Discovery of Breach Clause in Contracts

Discovery of Breach. To notify County immediately by telephone call plus email upon the discovery of breach of security of PHI in computerized form if the PHI was, or is reasonably believed to have been, acquired by an unauthorized person, or within twenty-four (24) hours by email of any suspected security incident, intrusion or unauthorized use or disclosure of PHI in violation of this Agreement and this Addendum, or potential loss of confidential data affecting this Agreement. Notification shall be provided to the County Compliance Manager. If the incident occurs after business hours or on a weekend or holiday and involves electronic PHI, notification shall be provided using the “Privacy Incident Reporting Form” located at the following web address: xxxxx://xxx.xxxx.xx.xxx/formsandpubs/laws/priv/Documents/Privacy- Incident-Report-PIR.pdf Business Associate shall take: i. Prompt corrective action to mitigate any risks or damages involved with the breach and to protect the operating environment and ii. Any action pertaining to such unauthorized disclosure required by applicable Federal and State laws and regulations.

Discovery of Breach. To notify County COUNTY immediately by telephone call plus email or fax upon the discovery of breach of security of PHI in computerized form if the PHI was, or is reasonably believed to have been, acquired by an unauthorized person, or within twenty-four (24) 24 hours by email or fax of any suspected security incident, intrusion or unauthorized use or disclosure of PHI in violation of this Agreement and this Addendum, or potential loss of confidential data affecting this Agreement. Notification shall be provided to the County COUNTY Compliance ManagerOfficer. If the incident occurs after business hours or on a weekend or holiday and involves electronic PHI, notification shall be provided using the “Privacy Incident Reporting Form” located at the following web address: xxxxx://xxx.xxxx.xx.xxx/formsandpubs/laws/priv/Documents/Privacy- Incident-Report-PIR.pdf xxxx://xxx.xxxx.xx.xxx/formsandpubs/laws/priv/Pages/DHCSBusinessAssociate sOnly.aspx Business Associate shall take: i. Prompt corrective action to mitigate any risks or damages involved with the breach and to protect the operating environment and ii. Any action pertaining to such unauthorized disclosure required by applicable Federal and State laws and regulations.

Discovery of Breach. To notify County immediately by telephone call plus email or fax upon the discovery of breach of security of PHI in computerized form if the PHI was, or is reasonably believed to have been, acquired by an unauthorized person, or within twenty-four (24) 24 hours by email or fax of any suspected security incident, intrusion or unauthorized use or disclosure of PHI in violation of this Agreement and this Addendum, or potential loss of confidential data affecting this Agreement. Notification shall be provided to the County Compliance Manager. If the incident occurs after business hours or on a weekend or holiday and involves electronic PHI, notification shall be provided using the “Privacy Incident Reporting Form” located at the following web address: xxxxx://xxx.xxxx.xx.xxx/formsandpubs/laws/priv/Documents/Privacy- Incident-Report-PIR.pdf Business Associate shall take: i. Prompt corrective action to mitigate any risks or damages involved with the breach and to protect the operating environment and ii. Any action pertaining to such unauthorized disclosure required by applicable Federal and State laws and regulations.

Discovery of Breach. To notify County immediately by telephone call plus email or fax upon the discovery of breach of security of PHI in computerized form if the PHI was, or is reasonably believed to have been, acquired by an unauthorized person, or within twenty-four (24) hours by email or fax of any suspected security incident, intrusion or unauthorized use or disclosure of PHI in violation of this Agreement and this Addendum, or potential loss of confidential data affecting this Agreement. Notification shall be provided to the County Compliance Manager. If the incident occurs after business hours or on a weekend or holiday and involves electronic PHI, notification shall be provided using the “Privacy Incident Reporting Form” located at the following web address: xxxxx://xxx.xxxx.xx.xxx/formsandpubs/laws/priv/Documents/Privacy- Incident-Report-PIR.pdf Business Associate shall take: i. Prompt corrective action to mitigate any risks or damages involved with the breach and to protect the operating environment and ii. Any action pertaining to such unauthorized disclosure required by applicable Federal and State laws and regulations.

Discovery of Breach. To notify County immediately by telephone call plus email or fax upon the discovery of breach of security of PHI in computerized form if the PHI was, or is reasonably believed to have been, acquired by an unauthorized person, or within twenty-four (24) 24 hours by email or fax of any suspected security incident, intrusion or unauthorized use or disclosure of PHI in violation of this Agreement and this Addendum, or potential loss of confidential data affecting this Agreement. Notification shall be provided to the County Compliance Manager. If the incident occurs after business hours or on a weekend or holiday and involves electronic PHI, notification shall be provided using the “Privacy Incident Reporting Form” located at the following web address: xxxxx://xxx.xxxx.xx.xxx/formsandpubs/laws/priv/Documents/Privacy- Incident-Report-PIR.pdf xxxx://xxx.xxxx.xx.xxx/formsandpubs/laws/priv/Pages/DHCSBusinessAssoci atesOnly.aspx Business Associate shall take: i. Prompt corrective action to mitigate any risks or damages involved with the breach and to protect the operating environment and ii. Any action pertaining to such unauthorized disclosure required by applicable Federal and State laws and regulations.

Discovery of Breach. To notify County Merced immediately by telephone call plus email upon the discovery of breach of security of PHI in computerized form if the PHI was, or is reasonably believed to have been, acquired by an unauthorized person, or within twenty-four (24) 24 hours by email of any suspected security incident, intrusion or unauthorized use or disclosure of PHI in violation of this Agreement and this Addendum, or potential loss of confidential data affecting this Agreement. Notification shall be provided to the County Merced Compliance Manager. If the incident occurs after business hours or on a weekend or holiday and involves electronic PHI, notification shall be provided using the “Privacy Incident Reporting Form” located at the following web address: xxxxx://xxx.xxxx.xx.xxx/formsandpubs/laws/priv/Documents/Privacy- Incident-Report-PIR.pdf Business Associate shall take: i. Prompt corrective action to mitigate any risks or damages involved with the breach and to protect the operating environment and ii. Any action pertaining to such unauthorized disclosure required by applicable Federal and State laws and regulations.

Discovery of Breach. To notify County immediately by telephone call plus email or fax upon the discovery of breach of security of PHI in computerized form if the PHI was, or is reasonably believed to have been, acquired by an unauthorized person, or within twenty-four (24) 24 hours by email or fax of any suspected security incident, intrusion or unauthorized use or disclosure of PHI in violation of this Agreement and this Addendum, or potential loss of confidential data affecting this Agreement. Notification shall be provided to the County Compliance ManagerOfficer. If the incident occurs after business hours or on a weekend or holiday and involves electronic PHI, notification shall be provided using the “Privacy Incident Reporting Form” located at the following web address: xxxxx://xxx.xxxx.xx.xxx/formsandpubs/laws/priv/Documents/Privacy- Incident-Report-PIR.pdf xxxx://xxx.xxxx.xx.xxx/formsandpubs/laws/priv/Pages/DHCSBusinessAssoci atesOnly.aspx Business Associate shall take: i. Prompt corrective action to mitigate any risks or damages involved with the breach and to protect the operating environment and ii. Any action pertaining to such unauthorized disclosure required by applicable Federal and State laws and regulations.

Discovery of Breach. To notify County immediately by telephone call plus email upon the discovery of breach of security of PHI in computerized form if the PHI was, or is reasonably believed to have been, acquired by an unauthorized person, or within twenty-four (24) hours by email of any suspected security incident, intrusion or unauthorized use or disclosure of PHI in violation of this Agreement MOU and this Addendum, or potential loss of confidential data affecting this AgreementMOU. Notification shall be provided to the County Compliance Manager. If the incident occurs after business hours or on a weekend or holiday and involves electronic PHI, notification shall be provided using the “Privacy Incident Reporting Form” located at the following web address: xxxxx://xxx.xxxx.xx.xxx/formsandpubs/laws/priv/Documents/Privacy- Incident-Report-PIR.pdf Business Associate shall take: i. Prompt corrective action to mitigate any risks or damages involved with the breach and to protect the operating environment and ii. Any action pertaining to such unauthorized disclosure required by applicable Federal and State laws and regulations.