Hour Formal Notice. No later than 48 consecutive clock hours after Discovery, or a time within which Discovery reasonably should have been made by CONTRACTOR of an Event or Breach of Confidential Information, provide formal notification to the State, including all reasonably available information about the Event or Breach, and CONTRACTOR's investigation, including without limitation and to the extent available: For (a) - (m) below: 45
Hour Formal Notice. No later than 48 consecutive clock hours after discovery, or a time within which discovery reasonably should have been made by Provider, provide formal notification to HHSC, including all reasonably available information about the incident or breach, and Provider’s investigation, including without limitation and to the extent available:
Hour Formal Notice. No later than 48 consecutive clock hours after Discovery, or a time within which Discovery reasonably should have been made by CONTRACTOR of an Event or Breach of Confidential Information, provide formal notification to the State, including all reasonably available information about the Event or Breach, and CONTRACTOR's investigation, including without limitation and to the extent available: For (a) - (m) below: 45 CFR 164.400- 414 The date the Event or Breach occurred; The date of CONTRACTOR's and, if applicable, Subcontractor's Discovery; A brief description of the Event or Breach; including how it occurred and who is responsible (or hypotheses, if not yet determined); A brief description of CONTRACTOR's investigation and the status of the investigation; A description of the types and amount of Confidential Information involved; Identification of and number of all Individuals reasonably believed to be affected, including first and last name of the individual and if applicable the, Legally authorized representative, last known address, age, telephone number, and email address if it is a preferred contact method, to the extent known or can be reasonably determined by CONTRACTOR at that time; CONTRACTOR’s initial risk assessment of the Event or Breach demonstrating whether individual or other notices are required by applicable law or this DUA for HHS approval, including an analysis of whether there is a low probability of compromise of the Confidential Information or whether any legal exceptions to notification apply; CONTRACTOR's recommendation for HHS’s approval as to the steps Individuals and/or CONTRACTOR on behalf of Individuals, should take to protect the Individuals from potential harm, including without limitation CONTRACTOR’s provision of notifications, credit protection, claims monitoring, and any specific protections for a Legally Authorized Representative to take on behalf of an Individual with special capacity or circumstances; The steps CONTRACTOR has taken to mitigate the harm or potential harm caused (including without limitation the provision of sufficient resources to mitigate); The steps CONTRACTOR has taken, or will take, to prevent or reduce the likelihood of recurrence of a similar Event or Breach; Identify, describe or estimate of the Persons, Workforce, Subcontractor, or Individuals and any law enforcement that may be involved in the Event or Breach; A reasonable schedule for CONTRACTOR to provide regular updates to the foregoing in ...
