Initial Notice to DHCS. The County Department/Agency will provide initial notice to DHCS by email, or alternatively, by telephone if email is unavailable, of any suspected security incident, intrusion, or unauthorized access, use, or disclosure of PII or potential loss of PII with a copy to CDSS. The DHCS is acting on behalf of CDSS for purposes of receiving reports of privacy and information security incidents and breaches. The County Department/Agency agrees to perform the following incident reporting to DHCS:
1. If a suspected security incident involves PII provided or verified by SSA, the County Department/Agency shall immediately notify DHCS upon discovery. For more information on SSA data, please see the Definition section of this Agreement.
2. If a suspected security incident does not involve PII provided or verified by SSA, the County Department/Agency shall notify DHCS within one
(1) working day of discovery. If it is unclear if the security incident involves SSA data, the County Department/Agency shall immediately report the incident upon discovery. A County Department/Agency shall notify DHCS of all personal information, as defined by California Civil Code Section 1798.3(a), that may have been accessed, used, or disclosed in any suspected security incident or breach, including but not limited to case numbers. Notice shall be made using the DHCS Privacy Incident Report (PIR) form, including all information known at the time. The County Department/Agency shall use the most current version of this form, which is available on the DHCS Privacy Office website at: xxxx://xxx.xxxx.xx.xxx/formsandpubs/laws/priv/Pages/CountiesOnly.aspx. All PIRs and supporting documentation are to be submitted to DHCS via email using the “DHCS Breach and Security Incidents Reporting” contact information found below in Subsection F. A breach shall be treated as discovered by the County Department/Agency as of the first day on which the breach is known, or by exercising reasonable diligence would have been known, to any person (other than the person committing the breach), who is an employee, officer or other agent of the County Department/Agency. Upon discovery of a breach, security incident, intrusion, or unauthorized access, use, or disclosure of PII, the County Department/Agency shall take:
1. Prompt action to mitigate any risks or damages involved with the occurrence and to protect the operating environment; and
2. Any action pertaining to such occurrence required by applicable Federal and St...
Initial Notice to DHCS. Immediately upon discovery of a suspected security incident that involves data provided to DHCS by the SSA, the county shall notify DHCS by email or telephone.
1. Prompt corrective action to mitigate any risks or damages involved with the breach and to protect the operating environment; and
2. Any action pertaining to such unauthorized disclosure required by applicable Federal and State laws and regulations.
Initial Notice to DHCS. The County Department/Agency will provide initial notice to DHCS by email, or alternatively, by telephone if email is unavailable, of any suspected security incident, intrusion, or unauthorized access, use, or disclosure of PI I or potential loss of PII with a copy to XXXX. The DHCS is acting on behalf of XXXX for purposes of receiving repo rts of p rivacy and information security incidents and breaches. The County Department/Agency agrees to perfo rm the following incident reporting to DHCS:
1. If a suspected security incident involves PII p rovided or verified by SSA, the County Department/Agency shall immediately notify DHCS upon discovery. For more information on SSA data, please see the Definition section of this Agreement.
2. If a suspected security incident d oes not involve PI I provided or verified by SSA, the County Department/Agency shall notify DHCS within one
Initial Notice to DHCS. (1) To notify DHCS immediately by telephone call plus email or fax upon the discovery of a breach of unsecured Medi-Cal PII in electronic media or in any other media if the PII was, or is reasonably believed to have been, accessed or acquired by an unauthorized person, or upon the discovery of a suspected security incident that involves data provided to DHCS by the SSA.
(2) To notify DHCS within 24 hours by email or fax of the discovery of any breach, security incident, intrusion, or unauthorized access, use, or disclosure of Medi-Cal PII in violation of this Agreement, or potential loss of confidential data affecting this Agreement. A breach shall be treated as discovered by the County Department as of the first day on which the breach is known, or by exercising reasonable diligence would have been known, to any person (other than the person committing the breach), who is an employee, officer or other agent of the County Department. Notice shall be provided to the DHCS Program Contract Manager, the DHCS Privacy Officer and the DHCS Information Security Officer. If the incident occurs after business hours or on a weekend or holiday and involves electronic PII, notice shall be provided by calling the DHCS ITSD Service Desk. Notice shall be made using the “DHCS Privacy Incident Report” form, including all information known at the time. The County Department shall use the most current version of this form, which is posted on the DHCS Privacy Office website (, then select “Privacy” in the left column and then “County Use” near the middle of the page) or use this link: Upon discovery of a breach, security incident, intrusion, or unauthorized access, use, or disclosure of Medi-Cal PII, the County Department shall take:
1. Prompt corrective action to mitigate any risks or damages involved with the breach and to protect the operating environment; and
2. Any action pertaining to such unauthorized disclosure required by applicable Federal and State laws and regulations.
Initial Notice to DHCS. (1) To notify DHCS immediately by telephone call plus email or fax upon the discovery of a breach of unsecured Medi-Cal Pll in electronic media or in any other media if the Pll was, or is reasonably believed to have been, accessed or acquired by an unauthorized person, or upon the discovery of a suspected security incident that involves data provided to DHCS by the SSA.
(2) To notify DHCS within 24 hours by (xxx.xxxx.xx .pov, then select "Privacy" in the left column and then "County Use" near the middle of the page) or use this link: xxxx://xxx.xxxx.xx.xxx/formsandpubs/laws/priv/Pages/CountiesOnly.aspx Upon discovery of a breach, security incident, intrusion, or unauthorized access, use, or disclosure of Medi-Cal PI I, County Department shall take:
1. Prompt corrective action to mitigate any risks or damages involved with the breach and to protect the operating environment; and
2. Any action pertaining to such unauthorized disclosure required by applicable Federal and State laws and regulations.
Initial Notice to DHCS. The CalSAWS Consortium shall notify DHCS, by email, or alternatively, by telephone if email is unavailable, of any suspected security incident, intrusion, or unauthorized access, use, or disclosure of Medi-Cal PII or potential loss of Medi-Cal PII. When making notification, the following applies:
1. If a suspected security incident involves Medi-Cal PII provided or verified by SSA, the CalSAWS Consortium shall immediately notify DHCS upon
Initial Notice to DHCS. The County Department will provide initial notice to DHCS with a copy to CDSS. The DHCS is acting on behalf of CDSS, for purposes of receiving reports of privacy and information security incidents and breaches. The County Department agrees to perform the following incident reporting to DHCS.
Initial Notice to DHCS. The County Department/Agency will provide initial notice to DHCS by email, or alternatively, by telephone if email is unavailable, of any suspected security incident, intrusion, or unauthorized access, use, or disclosure of PII or potential loss of PII with a copy to CDSS. The DHCS is acting on behalf of CDSS, for purposes of receiving reports of privacy and information security incidents and breaches. The County Department/Agency agrees to perform the following incident reporting to DHCS. :
