Notification in Case Breach. If Business Associate and/or Covered Entity access, maintain, retain, modify, record, store, destroy, or otherwise hold, use, or disclose UPHI, and Business Associate becomes aware of a Breach of such UPHI, Business Associate shall notify Covered Entity of such Breach in writing within thirty (30) days of discovery of such Breach. Such notice shall include the identification of each individual whose UPHI has been or is reasonably believed by Business Associate to have been accessed, acquired, or disclosed during such Breach.
