Common use of Incident Notification Clause in Contracts

Incident Notification. To the extent feasible, Business Associate will use commercially reasonable efforts to ensure that the technology safeguards used by Business Associate to secure PHI will render such PHI unusable, unreadable and indecipherable to individuals unauthorized to acquire or otherwise have access to such PHI in accordance with U.S. Department of Health and Human Services (HHS) Guidance published at 74 Federal Register 19006 (April 17, 2009) or such later regulations or guidance promulgated by HHS or issued by the National Institute for Standards and Technology (also known as “NIST”) concerning the protection of identifiable data, such as PHI. Business Associate will report, as required by 45 C.F.R. §164.314(a)(2)(i)(C), Incidents to Covered Entity, including promptly reporting any successful Incident of which it becomes aware and at the request of the Covered Entity, will identify: the date of the Incident; scope of Incident; Business Associate’s response to the Incident; and the identification of the party responsible for causing the Incident.

Incident Notification. To the extent feasible, Business Associate will use commercially reasonable efforts to ensure that the technology safeguards used by Business Associate to secure PHI will render such PHI unusable, unreadable and indecipherable to individuals unauthorized to acquire or otherwise have access to such PHI in accordance with U.S. Department of Health and Human Services (“HHS”) Guidance published at 74 Federal Register 19006 (April 17, 2009) or such later regulations or guidance promulgated by HHS or issued by the National Institute for Standards and Technology (also known as “NIST”) concerning the protection of identifiable data, such as PHI. Business Associate will report, as required by 45 C.F.R. §164.314(a)(2)(i)(C), Incidents incidents, as defined by 45 C.F.R. 164.304 (“Incident”), to Covered Entity, including promptly reporting any successful Incident of which it becomes aware and at the request of the Covered Entity, will identify: the date of the Incident; , scope of Incident; , Business Associate’s response to the Incident; , and the identification of the party responsible for causing the Incident.

Incident Notification. To the extent feasible, Business Associate will use commercially reasonable efforts to ensure that the technology safeguards used by Business Associate to secure PHI will render such PHI unusable, unreadable and indecipherable to individuals unauthorized to acquire or otherwise have access to such PHI in accordance with U.S. Department of Health and Human Services (“HHS”) Guidance published at 74 Federal Register 19006 (April 17, 2009) or such later regulations or guidance promulgated by HHS or issued by the National Institute for Standards and Technology (also known as “NIST”) concerning the protection of identifiable data, such as PHI. Business Associate will report, as required by 45 C.F.R. §164.314(a)(2)(i)(C), Incidents incidents, as defined by 45 C.F.R. 164.304 (“Incident”), to Covered Entity, including promptly reporting any successful Incident of which it becomes aware and at the request of the Covered Entity, will identify: the date of the Incident; , scope of Incident; , Business Associate’s response to the Incident; , and the identification of the party responsible for causing the Incident.. REFERENCE ONLY