Notice to DHCS Sample Clauses

Notice to DHCS. 18.1.1 Business Associate shall notify DHCS immediately upon the discovery of a suspected breach or security incident that involves SSA data. This notification will be provided by email upon discovery of the breach. If Business Associate is unable to provide notification by email, then Business Associate shall provide notice by telephone to DHCS. 18.1.2 Business Associate shall notify DHCS within 24 hours by email (or by telephone if Business Associate is unable to email DHCS) of the discovery of the following, unless attributable to a treatment provider that is not acting as a business associate of Business Associate: 18.1.2.1 Unsecured PHI if the PHI is reasonably believed to have been accessed or acquired by an unauthorized person; 18.1.2.2 Any suspected security incident which risks unauthorized access to PHI and/or other confidential information; 18.1.2.3 Any intrusion or unauthorized access, use or disclosure of PHI in violation of this Agreement; or 18.1.2.4 Potential loss of confidential information affecting this Agreement. 18.1.3 Notice shall be provided to the DHCS Program Contract Manager (as applicable), the DHCS Privacy Office, and the DHCS Information Security Office (collectively, “DHCS Contacts”) using the DHCS Contact Information in Section 18.6. 18.1.3.1 Prompt action to mitigate any risks or damages involved with the security incident or breach; and 18.1.3.2 Any action pertaining to such unauthorized disclosure required by applicable Federal and State law.

Notice to DHCS. (1) To notify DHCS immediately upon the discovery of a suspected security incident that involves data provided to DHCS by the Social Security Administration. This notification will be by telephone call plus email or fax upon the discovery of the breach. (2) To notify DHCS within 24 hours by email or fax of the discovery of unsecured PHI or PI in electronic media or in any other media if the PHI or PI was, or is reasonably believed to have been, accessed or acquired by an unauthorized person, any suspected security incident, intrusion or unauthorized access, use or disclosure of PHI or PI in violation of this Agreement and this Addendum, or potential loss of confidential data affecting this Agreement. A breach shall be treated as discovered by Business Associate as of the first day on which the breach is known, or by exercising reasonable diligence would have been known, to any person (other than the person committing the breach) who is an employee, officer or other agent of Business Associate. Notice shall be provided to the DHCS Program Contract Manager, the DHCS Privacy Officer and the DHCS Information Security Officer. If the incident occurs after business hours or on a weekend or holiday and involves data provided to DHCS by the Social Security Administration, notice shall be provided by calling the DHCS EITS Service Desk. Notice shall be made using the “DHCS Privacy Incident Report” form, including all information known at the time. Business Associate shall use the most current version of this form, which is posted on the DHCS Privacy Office website (xxx.xxxx.xx.xxx, then select “Privacy” in the left column and then “Business Use” near the middle of the page) or use this link: xxxx://xxx.xxxx.xx.xxx/formsandpubs/laws/priv/Pages/DHCSBusinessAssociatesOnly.aspx Upon discovery of a breach or suspected security incident, intrusion or unauthorized access, use or disclosure of PHI or PI, Business Associate shall take: a. Prompt corrective action to mitigate any risks or damages involved with the breach and to protect the operating environment; and b. Any action pertaining to such unauthorized disclosure required by applicable Federal and State laws and regulations.

Notice to DHCS. To notify DHCS immediately upon the discovery of a suspected security incident that involves data provided to DHCS by the Social Security Administration. This notification will be by telephone call plus email or fax upon the discovery of the breach.

Notice to DHCS. 18.1.1 Business Associate shall notify DHCS immediately upon the discovery of a suspected breach or security incident that involves SSA data. This notification will be provided by email upon discovery of the breach. If Business Associate is unable to provide notification by email, then Business Associate shall provide notice by telephone to DHCS. 18.1.2 Business Associate shall notify DHCS within 24 hours by email (or by telephone if Business Associate is unable to email DHCS) of the discovery of: 18.1.2.1 Unsecured PHI if the PHI is reasonably believed to have been accessed or acquired by an unauthorized person; 18.1.2.2 Any suspected security incident which risks unauthorized access to PHI and/or other confidential information; 18.1.2.3 Any intrusion or unauthorized access, use or disclosure of PHI in violation of this Agreement; or 18.1.2.4 Potential loss of confidential data affecting this Agreement. 18.1.3 Notice shall be provided to the DHCS Program Contract Manager (as applicable), the DHCS Privacy Office, and the DHCS 18.1.3.1 Prompt action to mitigate any risks or damages involved with the security incident or breach; and 18.1.3.2 Any action pertaining to such unauthorized disclosure required by applicable Federal and State law.

Notice to DHCS. 18.1.1. Business Associate shall notify DHCS immediately upon the discovery of a suspected breach or security incident that involves SSA data. This notification shall be provided via the DHCS Incident Reporting Portal upon discovery of the breach. If Business Associate is unable to provide notification via the DHCS Incident Reporting Portal, then Business Associate shall provide notice by email or telephone to DHCS. 18.1.2. Business Associate shall notify DHCS within 24 hours via the online DHCS Incident Reporting Portal (or by email or telephone if Business Associate is unable to use the DHCS Incident Reporting Portal) of the discovery of the following, unless attributable to a treatment provider that is not acting as a business associate of Business Associate: 18.1.2.1. Unsecured PHI if the PHI is reasonably believed to have been accessed or acquired by an unauthorized person; 18.1.2.2. Any suspected security incident which risks unauthorized access to PHI and/or other confidential information; 18.1.2.3. Any intrusion or unauthorized access, use or disclosure of PHI in violation of this Agreement; or 18.1.2.4. Potential loss of confidential information affecting this Agreement. 18.1.3. Notice submitted to the DHCS Incident Reporting Portal will be sent to the DHCS Program Contract Manager (as applicable), the DHCS Privacy Office, and the DHCS Information Security Office. If providing notice to DHCS via email, use the DHCS contact information at Section 18.6 below (collectively, “DHCS Contacts”). 18.1.3.1. Prompt action to mitigate any risks or damages involved with the security incident or breach; and 18.1.3.2. Any action pertaining to such unauthorized disclosure required by applicable Federal and State law.

Notice to DHCS. 19.1.1 Business Associate shall notify DHCS immediately upon the discovery of a suspected breach or security incident that involves SSA data. This notification shall be provided via the DHCS Incident Reporting Portal upon discovery of the breach. If Business Associate is unable to provide notification via the DHCS Incident Reporting Portal, then Business Associate shall provide notice by email or telephone to DHCS.

Notice to DHCS. 17.1.1 Contractor shall notify DHCS within 24 hours by email (or by telephone if Contractor is unable to email DHCS) of the discovery of: 17.1.1.1 Unsecured PHI if the PHI is reasonably believed to have been accessed or acquired by an unauthorized person; 17.1.1.2 Any suspected security incident which risks unauthorized access to PHI and/or other confidential information; 17.1.1.3 Any intrusion or unauthorized access, use or disclosure of PHI in violation of this Agreement; or 17.1.1.4 Potential loss of confidential data affecting this Agreement. 17.1.2 Notice shall be provided to the DHCS Program Contract Manager (as applicable), the DHCS Privacy Office, and the DHCS Information Security Office (collectively, “DHCS Contacts”) using the DHCS Contact Information at Section 17.6. below. 17.1.2.1 Prompt action to mitigate any risks or damages involved with the security incident or breach; and 17.1.2.2 Any action pertaining to such unauthorized disclosure required by applicable Federal and State law.