Investigation, Response and Mitigation. (A) Contractor shall immediately conduct a full and complete investigation, respond to the Breach, commit necessary and appropriate staff and resources to expeditiously respond, and report as required to HHS for incident response purposes and for purposes of HHS’s compliance with report and notification requirements, to the satisfaction of HHS.
(B) Contractor shall complete or participate in a risk assessment as directed by HHS following a Breach, and provide the final assessment, corrective actions and mitigations to HHS for review and approval.
(C) Contractor shall fully cooperate with HHS to respond to inquiries and/or proceedings by state and federal authorities, persons and/or individuals about the Breach.
(D) Contractor shall fully cooperate with HHS's efforts to seek appropriate injunctive relief or otherwise prevent or curtail such Breach, or to recover or protect any Confidential Information, including complying with reasonable corrective action or measures, as specified by HHS in a Corrective Action Plan if directed by HHS under the Base Contract.
Investigation, Response and Mitigation. For A-F below: 45 CFR 164.308, 310 and 312; 164.530
(A) CONTRACTOR will immediately conduct a full and complete investigation, respond to the Event or Breach, commit necessary and appropriate staff and resources to expeditiously respond, and report as required to and by HHS for incident response purposes and for purposes of HHS’s compliance with report and notification requirements, to the satisfaction of HHS.
(B) CONTRACTOR will complete or participate in a risk assessment as directed by HHS following an Event or Breach, and provide the final assessment, corrective actions and mitigations to HHS for review and approval.
(C) CONTRACTOR will fully cooperate with HHS to respond to inquiries and/or proceedings by state and federal authorities, Persons and/or Individuals about the Event or Breach.
(D) CONTRACTOR will fully cooperate with HHS's efforts to seek appropriate injunctive relief or otherwise prevent or curtail such Event or Breach, or to recover or protect any Confidential Information, including complying with reasonable corrective action or measures, as specified by HHS in a Corrective Action Plan if directed by HHS under the Base Contract.
Investigation, Response and Mitigation. (a) Provider will immediately conduct a full and complete investigation, respond to the incident or breach, commit necessary and appropriate staff and resources to expeditiously respond, and report as required to and by HHSC for incident response purposes and for purposes of HHSC’s compliance with report and notification requirements, to the satisfaction of HHSC.
(b) Provider will complete or participate in a risk assessment as directed by HHSC following an incident or breach, and provide the final assessment, corrective actions and mitigations to HHSC for review and approval.
(c) Provider will fully cooperate with HHSC to respond to inquiries and/or proceedings by state and federal authorities, persons and/or incident about the incident or breach.
(d) Provider will fully cooperate with HHSC’s efforts to seek appropriate injunctive relief or otherwise prevent or curtail such incident or breach, or to recover or protect any HHSC Confidential including complying with reasonable corrective action or measures, as specified by HHSC in a Corrective Action Plan if directed by HHSC under the UCCM.
Investigation, Response and Mitigation. Contractor shall immediately conduct a full and complete investigation, respond to the Breach, commit necessary and appropriate staff and resources to expeditiously respond, and report as required to HHS for incident response purposes and for purposes of HHS’s compliance with report and notification requirements, to the satisfaction of HHS. Contractor shall complete or participate in a risk assessment as directed by HHS following a Breach, and provide the final assessment, corrective actions and mitigations to HHS for review and approval. Contractor shall fully cooperate with HHS to respond to inquiries and/or proceedings by state and federal authorities, persons and/or individuals about the Breach. Contractor shall fully cooperate with HHS's efforts to seek appropriate injunctive relief or otherwise prevent or curtail such Breach, or to recover or protect any Confidential Information, including complying with reasonable corrective action or measures, as specified by HHS in a Corrective Action Plan if directed by HHS under the Base Contract.
Investigation, Response and Mitigation. (A) Contractor shall immediately conduct a full and complete investigation, respond to the Breach, commit necessary and appropriate staff and resources to expeditiously respond, and report as required to HHS for incident response purposes and for purposes of HHS’s compliance with report and notification requirements, to the satisfaction of HHS.
(B) Contractor shall complete or participate in a risk assessment as directed by HHS following a Breach, and provide the final assessment, corrective actions and mitigations to HHS for review.
(C) Contractor shall fully cooperate with HHS to respond to inquiries and/or proceedings by state and federal authorities, persons and/or individuals about the Breach.
(D) Contractor shall fully cooperate with HHS's efforts to seek appropriate injunctive relief or otherwise prevent or curtail such Breach, or to recover or protect any Confidential Information, including considering reasonable corrective action or measures, as specified by HHS in a Corrective Action Plan if directed by HHS under the Base Contract.
M. Section 4.05 (“Breach Notification to Individuals and Reporting to Authorities”) in Attachment A, HHS Data Use Agreement (Version 8.5; October 23, 2019), to this Contract is deleted in its entirety and replaced with the following:
Investigation, Response and Mitigation. (A) User shall immediately conduct a full and complete investigation, respond to the Breach, commit necessary and appropriate staff and resources to expeditiously respond, and report as required to XXXXX for incident response purposes and for purposes of SARAH’s compliance with report and notification requirements, to the satisfaction of XXXXX.
(B) User shall complete or participate in a risk assessment as directed by XXXXX following a Breach, and provide the final assessment, corrective actions and mitigations to XXXXX for review and approval.
(C) User shall fully cooperate with XXXXX to respond to inquiries and/or proceedings by state and federal authorities, persons and/or individuals about the Breach.
(D) User shall fully cooperate with SARAH's efforts to seek appropriate injunctive relief or otherwise prevent or curtail such Breach, or to recover or protect any Confidential Information, including complying with reasonable corrective action or measures, as specified by XXXXX in a Corrective Action Plan if directed by XXXXX.
Investigation, Response and Mitigation. (A) CONTRACTOR will immediately conduct an investigation and respond to the Incident or Breach, and will commit necessary and appropriate staff and resources to expeditiously respond and report to HHSC to ensure HHSC’s compliance with report and notification timelines, to the satisfaction of HHSC.
(B) CONTRACTOR will have procedures and processes to respond to an Incident or Breach, in place prior to the delivery of any Confidential Information, including investigation, incident response, root cause analysis, notification, reporting and mitigation (to the maximum extent practicable, any harmful effect of a use or disclosure of Confidential Information, including without limitation Unsecured PHI, that is contrary to this BAA, the Base Contract, HIPAA, HITECH or other laws applicable to any Confidential Information).
(C) CONTRACTOR will update as necessary, procedures to investigate the Incident or Breach, mitigate losses, and protect against any future Incident or Breach, and to provide a description of these procedures and the specific findings of the investigation to HHSC in the time and manner reasonably requested by HHSC.
(D) CONTRACTOR will complete or participate in a risk assessment following an Incident or Breach, and provide the final assessment to HHSC.
(E) CONTRACTOR will cooperate with HHSC to respond to inquiries and/or proceedings by state and federal authorities and/or Individuals.
(F) CONTRACTOR will cooperate with HHSC's efforts to seek appropriate injunctive relief or otherwise prevent or curtail such threatened or actual Incident or Breach, or to recover or protect any Confidential Information, including complying with reasonable corrective action or measures, as specified by HHSC and a Corrective Action Plan if directed by HHSC under Article 14 of the Base Contract.
Investigation, Response and Mitigation. (A) Service Provider will immediately conduct an investigation and respond to the Incident or Breach, and will commit necessary and appropriate staff and resources to expeditiously respond.
(B) Service Provider will have procedures and processes to respond to an Incident or Breach, in place prior to the delivery of any PHI, including investigation, incident response, root cause analysis, notification, reporting and mitigation (to the maximum extent practicable, any harmful effect of a use or disclosure of Unsecured PHI, that is contrary to this BAA, the MSA, HIPAA, HITECH or other laws as may be applicable
(C) Service Provider will update as necessary, procedures to investigate the Incident or Breach, mitigate losses, and protect against any future Incident or Breach, and to provide a description of these procedures and the specific findings of its investigation.
(D) Service Provider will complete or participate in a risk assessment following an Incident or Breach.
(E) Service Provider will cooperate with DSHS to respond to inquiries and/or proceedings by state and federal authorities and/or Individuals.
(F) Service Provider will cooperate with DSHS's efforts to seek appropriate injunctive relief or otherwise prevent or curtail such threatened or actual Incident or Breach, or to recover or protect any PHI, including complying with reasonable corrective action or measures.
Investigation, Response and Mitigation. (A) User shall immediately conduct a full and complete investigation, respond to the Breach, commit necessary and appropriate staff and resources to expeditiously respond, and report as required to CTH for incident response purposes and for purposes of CTH’s compliance with report and notification requirements, to the satisfaction of CTH.
(B) User shall complete or participate in a risk assessment as directed by CTH following a Breach, and provide the final assessment, corrective actions and mitigations to CTH for review and approval.
(C) User shall fully cooperate with CTH to respond to inquiries and/or proceedings by state and federal authorities, persons and/or individuals about the Breach.
(D) User shall fully cooperate with CTH's efforts to seek appropriate injunctive relief or otherwise prevent or curtail such Breach, or to recover or protect any Confidential Information, including complying with reasonable corrective action or measures, as specified by CTH in a Corrective Action Plan if directed by CTH.
Investigation, Response and Mitigation. Contractor shall immediately conduct a full and complete investigation, respond to the Breach, commit necessary and appropriate staff and resources to expeditiously respond, and report as required to HHS for incident response purposes and for purposes of HHS’s compliance with report and notification requirements, to the satisfaction of HHS.
