Obligation to report to STATE. Upon discovery of a Privacy Incident, Security Incident, and/or Breach, COUNTY will report to STATE in writing as further specified in subsection 2.2(F).
Obligation to report to STATE. Upon discovery of a privacy incident, security incident, or breach, Contractor will report to State in writing as specified in Section 2.2(F).
Obligation to report to STATE. Upon discovery of a privacy incident, security incident, or breach, the CAC will report to State in writing as specified in Section 2.2(F).
Obligation to report to STATE. Upon IHP’s discovery of a privacy incident, security incident, or breach involving the PHI data, IHP will report to STATE in writing as specified in section 8.7.5.6. Communication with authorized representative. IHP will send any written reports to, and communicate and coordinate as necessary with, STATE’s authorized representative. Cooperation of response. IHP will cooperate with requests and instructions received from STATE regarding activities related to investigation, containment, mitigation, and eradication of conditions that led to, or resulted from, the security incident, privacy incident, or breach. Information to respond to inquiries about an investigation. IHP will, as soon as possible, but not later than two (2) business days after a request from STATE, provide STATE with any reports or information requested by STATE related to an investigation of a security incident, privacy incident, or breach. Documentation. IHP will document actions taken under 8.7.5.1 through 8.7.5.4 of this section, and provide such documentation to STATE upon request. Reporting Privacy Incidents, Security Incidents, and Breaches. IHP will comply with the reporting obligations of this section as they apply to the kind of Protected Information involved. IHP will also comply with section 8.7.5 in responding to any actual privacy incident, security incident, or breach. IHP will report breaches and security incidents involving the PHI data to STATE. IHP will notify STATE, in writing, of (1) any breach of PHI; (2) any security incident; or (3) any violation of an individual's privacy rights as they involve the PHI data created, received, maintained, or transmitted by IHP or its Agents on behalf of STATE. Breach reporting. IHP will report, in writing, any breach of the PHI data to STATE within five (5) business days of discovery, in accordance with 45 C.F.R § 164.410. Content of report to STATE. Reports to the authorized representative regarding breaches of the PHI data will include, to the extent possible, the following information:
Obligation to report to STATE. Upon discovery of a privacy incident, security incident, or breach, Tribe will report to State in writing as specified in Section 2.2(F).
