Notification and Reporting Activities. As soon as possible, but in any event no later than two (2) business days following the date upon which the Transportation Provider becomes aware of the Event, the Transportation Provider shall verbally report the Event to EOHHS with as much of the details listed below as possible, and shall follow such verbal report within five (5) business days with a written report outlining the Event with the following information:
Notification and Reporting Activities. As soon as possible, but in any event no later than twenty-four (24) hours after Contractor becomes aware of the Event, the Contractor shall verbally report the Event to EOHHS Privacy Office with as much of the details listed below as possible, and shall follow such verbal report within three (3) business days with a written report outlining the Event with the following information to the extent known:
Notification and Reporting Activities. As soon as possible, but in any event no later than two
Notification and Reporting Activities. For all Events and all notices made pursuant to this Agreement, Contractor shall notify Optum as soon as possible, but in any event before Contractor notifies MassIT, CCA and/or EOHHS. Contractor shall, to the extent practicable, coordinate all such notices with Optum, consistent with meeting the deadlines set forth in this Agreement. As soon as possible, but in any event no later than two (2) business days following the date upon which Contractor becomes aware of the Event, Contractor shall verbally report the Event to Optum as well as MassIT, CCA and/or EOHHS, as the case may be, with as much of the details listed below as possible, and shall follow such verbal report within five
Notification and Reporting Activities. As soon as possible, but in any event no later than two (2) business days following the date upon which Contractor becomes aware of the Event, Contractor shall verbally report the Event to MassIT, CCA and/or EOHHS, as the case may be, with as much of the details listed below as possible, and shall follow such verbal report within five (5) business days with a written report outlining the Event with the following details to the extent that such details are available at the time of the report and subsequently as additional information becomes available:
Notification and Reporting Activities. As soon as possible, but in any event no later than two (2) business days following the date upon which the Provider becomes aware of the Event, the Provider shall orally report the Event to EOHHS with as much of the details listed below as possible, and shall follow such oral report within five (5) business days with a written report outlining the Event with the following information: The date of the Event if known or, if the date is unknown, the estimated date; The date of the discovery of the Event; The nature of the Event, including as much specific detail as possible (e.g.,, cause, contributing factors, chronology of events); The nature of the PI involved in the Event (e.g., the types of identifiers and other information involved), together with samples of any forms or documents that were involved in the Event to illustrate the type of PI involved (with personal identifiers removed or redacted); The exact number of individuals whose PI was involved in the Event if known or, if unknown, a reasonable estimate based on known facts (categorized according to the type of PI involved, if different types of PI was involved for different individuals), together with a description of how the exact or estimated number of individuals was determined; A summary of the nature and scope of the Provider’s investigation into the Event; The harmful effects of the Event known to the Provider, all actions the Provider has taken or plans to take to mitigate such effects, and the results of all mitigation actions already taken; A summary of steps taken in connection with and to prevent such Event in the future, including copies of revised policies and procedures, changes in business processes and staff training; and Any additional information and/or documentation that the Provider is required to provide to EOHHS under 45 CFR §164.410, M.G.L. c. 93H, §3(a) or other similar Applicable Law. To the extent that any such information is not available at the time of the report, the Provider shall provide such information to EOHHS as such information becomes available in one or more subsequent written reports. The Provider shall provide EOHHS with such additional information regarding the Event as EOHHS may reasonably request, which additional information may include a written risk analysis rebutting any presumption that the Event constituted a breach for purposes of 45 CFR Part 164, Subpart D. The Provider acknowledges and agrees that it may be subject to reporting obligations under...
