Common use of Providing Notice of Breaches Clause in Contracts

Providing Notice of Breaches. 8.1 If Covered Entity determines that a Breach of PHI for which Business Associate was responsible, and if requested by Covered Entity, Business Associate shall provide notice to the Individual whose PHI has been the subject of the Breach. When so requested, Business Associate shall consult with Covered Entity about the timeliness, content and method of notice, and shall receive Covered Entity’s approval concerning these elements. Business Associate shall be responsible for the cost of notice and related remedies. 8.2 The notice to affected Individuals shall be provided as soon as reasonably possible and in no case later than sixty (60) calendar days after Business Associate reported the Breach to Covered Entity. 8.3 The notice to affected Individuals shall be written in plain language and shall include, to the extent possible: 1) a brief description of what happened; 2) a description of the types of Unsecured PHI that were involved in the Breach; 3) any steps Individuals can take to protect themselves from potential harm resulting from the Breach; 4) a brief description of what the Business Associate is doing to investigate the Breach to mitigate harm to Individuals and to protect against further Breaches; and 5) contact procedures for Individuals to ask questions or obtain additional information, as set forth in 45 CFR § 164.404(c). 8.4 Business Associate shall notify Individuals of Breaches as specified in 45 CFR § 164.404(d) (methods of Individual notice). In addition, when a Breach involves more than 500 residents of Vermont, Business Associate shall, if requested by Covered Entity, notify prominent media outlets serving Vermont, following the requirements set forth in 45 CFR § 164.406.

Providing Notice of Breaches. 8.1 If Covered Entity determines that a Breach of PHI for which Contractor Business Associate was responsible, and if requested by Covered Entity, Contractor Business Associate shall provide notice to the Individual whose PHI has been the subject of the Breach. When so requested, Contractor Business Associate shall consult with Covered Entity about the timeliness, content and method of notice, and shall receive Covered Entity’s approval concerning these elements. Contractor Business Associate shall be responsible for the cost of notice and related remedies. 8.2 The notice to affected Individuals shall be provided as soon as reasonably possible and in no case later than sixty (60) 60 calendar days after Contractor Business Associate reported the Breach to Covered Entity. 8.3 The notice to affected Individuals shall be written in plain language and shall include, to the extent possible: , 1) a brief description of what happened; , 2) a description of the types of Unsecured PHI that were involved in the Breach; , 3) any steps Individuals can take to protect themselves from potential harm resulting from the Breach; , 4) a brief description of what the Contractor Business Associate is doing to investigate the Breach to mitigate harm to Individuals and to protect against further Breaches; , and 5) contact procedures for Individuals to ask questions or obtain additional information, as set forth in 45 CFR § 164.404(c). 8.4 Contractor Business Associate shall notify Individuals of Breaches as specified in 45 CFR § 164.404(d) (methods of Individual notice). In addition, when a Breach involves more than 500 residents of Vermont, Contractor Business Associate shall, if requested by Covered Entity, notify prominent media outlets serving Vermont, following the requirements set forth in 45 CFR § 164.406.

Providing Notice of Breaches. 8.1 7.1 If Covered Entity determines that a Breach an impermissible acquisition, access, use or disclosure of PHI for which one of Business Associate Associate’s employees or agents was responsibleresponsible constitutes a Breach as defined in 45 CFR §164.402, and if requested by Covered Entity, Business Associate shall provide notice to the Individual individuals whose PHI has been the subject of the Breach. When so requestedrequested to provide notice, Business Associate shall consult with Covered Entity about the timeliness, content and method of notice, and shall receive Covered Entity’s approval concerning these elements. Business Associate shall be responsible for the The cost of notice and related remediesremedies shall be borne by Business Associate. 8.2 7.2 The notice to affected Individuals individuals shall be provided as soon as reasonably possible and in no case later than sixty (60) 60 calendar days after Business Associate reported the Breach to Covered Entity. 8.3 7.3 The notice to affected Individuals individuals shall be written in plain language and shall include, to the extent possible: , 1) a brief description of what happened; , 2) a description of the types of Unsecured PHI that were involved in the Breach; , 3) any steps Individuals individuals can take to protect themselves from potential harm resulting from the Breach; , 4) a brief description of what the Business Associate is doing to investigate the Breach Breach, to mitigate harm to Individuals individuals and to protect against further Breaches; , and 5) contact procedures for Individuals individuals to ask questions or obtain additional information, as set forth in 45 CFR § §164.404(c). 8.4 7.4 Business Associate shall notify Individuals individuals of Breaches as specified in 45 CFR § §164.404(d) (methods of Individual individual notice). In addition, when a Breach involves more than 500 residents of Vermont, Business Associate shall, if requested by Covered Entity, notify prominent media outlets serving Vermont, following the requirements set forth in 45 CFR § §164.406.

Providing Notice of Breaches. 8.1 If Covered Entity determines that a Breach of PHI for which Business Associate was responsible, and if requested by Covered Entity, Business Associate shall provide notice to the Individual whose PHI has been the subject of the Breach. When so requested, Business Associate shall consult with Covered Entity about the timeliness, content and method of notice, and shall receive Covered Entity’s approval concerning these elements. Business Associate shall be responsible for the cost of notice and related remedies. 8.2 The notice to affected Individuals shall be provided as soon as reasonably possible and in no case later than sixty (60) 60 calendar days after Business Associate reported the Breach to Covered Entity. 8.3 The notice to affected Individuals shall be written in plain language and shall include, to the extent possible: , 1) a brief description of what happened; , 2) a description of the types of Unsecured PHI that were involved in the Breach; , 3) any steps Individuals can take to protect themselves from potential harm resulting from the Breach; , 4) a brief description of what the Business Associate is doing to investigate the Breach to mitigate harm to Individuals and to protect against further Breaches; , and 5) contact procedures for Individuals to ask questions or obtain additional information, as set forth in 45 CFR § 164.404(c). 8.4 Business Associate shall notify Individuals of Breaches as specified in 45 CFR § 164.404(d) (methods of Individual notice). In addition, when a Breach involves more than 500 residents of Vermont, Business Associate shall, if requested by Covered Entity, notify prominent media outlets serving Vermont, following the requirements set forth in 45 CFR § 164.406.

Providing Notice of Breaches. 8.1 7.1 If Covered Entity determines that a Breach an impermissible acquisition, access, use or disclosure of PHI for which one of Business Associate Associate’s employees or agents was responsibleresponsible constitutes a Breach as defined in 45 CFR §164.402, and if requested by Covered Entity, Business Associate shall provide notice to the Individual individuals whose PHI has been was the subject of the Breach. When so requestedrequested to provide notice, Business Associate shall consult with Covered Entity about the timeliness, content and method of notice, and shall receive Covered Entity’s approval concerning these elements. Business Associate shall be responsible for the The cost of notice and related remediesremedies shall be borne by Business Associate. 8.2 7.2 The notice to affected Individuals individuals shall be provided as soon as reasonably possible and in no case later than sixty (60) 60 calendar days after Business Associate reported the Breach to Covered Entity. 8.3 7.3 The notice to affected Individuals individuals shall be written in plain language and shall include, to the extent possible: , 1) a brief description of what happened; , 2) a description of the types of Unsecured PHI that were involved in the Breach; , 3) any steps Individuals individuals can take to protect themselves from potential harm resulting from the Breach; , 4) a brief description of what the Business Associate associate is doing to investigate the Breach Breach, to mitigate harm to Individuals individuals and to protect against further Breaches; , and 5) contact procedures for Individuals individuals to ask questions or obtain additional information, as set forth in 45 CFR § §164.404(c). 8.4 7.4 Business Associate shall notify Individuals individuals of Breaches as specified in 45 CFR § §164.404(d) (methods of Individual individual notice). In addition, when a Breach involves more than 500 residents of Vermont, Business Associate associate shall, if requested by Covered Entity, notify prominent media outlets serving Vermont, following the requirements set forth in 45 CFR § §164.406.

Providing Notice of Breaches. 8.1 7.1 If Covered Entity determines that a Breach an impermissible acquisition, access, use or disclosure of PHI for which one of Business Associate Associate’s employees or agents was responsibleresponsible constitutes a Breach as defined in 45 CFR §164.402, and if requested by Covered Entity, Business Associate shall provide notice to the Individual individuals whose PHI has been was the subject of the Breach. When so requestedrequested to provide notice, Business Associate shall consult with Covered Entity about the timeliness, content and method of notice, and shall receive Covered Entity’s approval concerning these elements. Business Associate shall be responsible for the The cost of notice and related remediesremedies shall be borne by Business Associate. 8.2 7.2 The notice to affected Individuals individuals shall be provided as soon as reasonably possible and in no case later than sixty (60) 60 calendar days after Business Associate reported the Breach to Covered Entity. 8.3 7.3 The notice to affected Individuals individuals shall be written in plain language and shall include, to the extent possible: , 1) a brief description of what happened; , 2) a description of the types of Unsecured PHI that were involved in the Breach; , 3) any steps Individuals individuals can take to protect themselves from potential harm resulting from the Breach; , 4) a brief description of what the Business Associate associate is doing to investigate the Breach Breach, to mitigate harm to Individuals individuals and to protect against further Breaches; , and 5) contact procedures for Individuals individuals to ask questions or obtain additional information, as set forth in 45 CFR § §164.404(c). 8.4 7.4 Business Associate shall notify Individuals individuals of Breaches as specified in 45 CFR § §164.404(d) (methods of Individual individual notice). In addition, when a Breach involves more than 500 residents of Vermont, Business Associate associate shall, if requested by Covered Entity, notify prominent media outlets serving Vermont, following the requirements set forth in 45 CFR § §164.406.

Providing Notice of Breaches. 8.1 If Covered Entity determines that a Breach of PHI for which Business Associate was responsible, and if requested by Covered Entity, Business Associate shall provide notice to the Individual whose PHI has been the subject of the Breach. When so requested, Business Associate shall consult with Covered Entity about the timeliness, content and method of notice, and shall receive Covered Entity’s approval concerning these elements. Business Associate shall be responsible for the cost of notice and related remedies. 8.2 . The notice to affected Individuals shall be provided as soon as reasonably possible and in no case later than sixty (60) calendar days after Business Associate reported the Breach to Covered Entity. 8.3 . The notice to affected Individuals shall be written in plain language and shall include, to the extent possible: 1) a brief description of what happened; 2) a description of the types of Unsecured PHI that were involved in the Breach; 3) any steps Individuals can take to protect themselves from potential harm resulting from the Breach; 4) a brief description of what the Business Associate is doing to investigate the Breach to mitigate harm to Individuals and to protect against further Breaches; and 5) contact procedures for Individuals to ask questions or obtain additional information, as set forth in 45 CFR § 164.404(c). 8.4 . Business Associate shall notify Individuals of Breaches as specified in 45 CFR § 164.404(d) (methods of Individual notice). In addition, when a Breach involves more than 500 residents of Vermont, Business Associate shall, if requested by Covered Entity, notify prominent media outlets serving Vermont, following the requirements set forth in 45 CFR § 164.406.

Providing Notice of Breaches. 8.1 If Covered Entity determines that a Breach of PHI for which Contractor Business Associate was responsible, and if requested by Covered Entity, Contractor Business Associate shall provide notice to the Individual whose PHI has been the subject of the Breach. When so requested, Contractor Business Associate shall consult with Covered Entity about the timeliness, content and method of notice, and shall receive Covered Entity’s approval concerning these elements. Contractor Business Associate shall be responsible for the cost of notice and related remedies. 8.2 The notice to affected Individuals shall be provided as soon as reasonably possible and in no case later than sixty (60) 60 calendar days after Contractor Business Associate reported the Breach to Covered Entity. 8.3 The notice to affected Individuals shall be written in plain language and shall include, to the extent possible: , 1) a brief description of what happened; , 2) a description of the types of Unsecured PHI that were involved in the Breach; , 3) any steps Individuals can take to protect themselves from potential harm resulting from the Breach; , 4) a brief description of what the Contractor Business Associate is doing to investigate the Breach to mitigate harm to Individuals and to protect against further Breaches; , and 5) contact procedures for Individuals to ask questions or obtain additional information, as set forth in 45 CFR § 164.404(c). 8.4 Business Associate shall notify Individuals of Breaches as specified in 45 CFR § 164.404(d) (methods of Individual notice). In addition, when a Breach involves more than 500 residents of Vermont, Business Associate shall, if requested by Covered Entity, notify prominent media outlets serving Vermont, following the requirements set forth in 45 CFR § 164.406.

Providing Notice of Breaches. 8.1 If Covered Entity determines that a Breach of PHI for which Contractor Business Associate was responsible, and if requested by Covered Entity, Contractor Business Associate shall provide notice to the Individual whose PHI has been the subject of the Breach. When so requested, Contractor Business Associate shall consult with Covered Entity about the timeliness, content and method of notice, and shall receive Covered Entity’s approval concerning these elements. Business Associate shall be responsible for the cost of notice and related remedies.r 8.2 The notice to affected Individuals shall be provided as soon as reasonably possible and in no case later than sixty (60) 60 calendar days after Contractor Business Associate reported the Breach to Covered Entity. 8.3 The notice to affected Individuals shall be written in plain language and shall include, to the extent possible: , 1) a brief description of what happened; , 2) a description of the types of Unsecured PHI that were involved in the Breach; , 3) any steps Individuals can take to protect themselves from potential harm resulting from the Breach; , 4) a brief description of what the Contractor Business Associate is doing to investigate the Breach to mitigate harm to Individuals and to protect against further Breaches; , and 5) contact procedures for Individuals to ask questions or obtain additional information, as set forth in 45 CFR § 164.404(c). 8.4 Contractor Business Associate shall notify Individuals of Breaches as specified in 45 CFR § 164.404(d) (methods of Individual notice). In addition, when a Breach involves more than 500 residents of Vermont, Contractor Business Associate shall, if requested by Covered Entity, notify prominent media outlets serving Vermont, following the requirements set forth in 45 CFR § 164.406.

Providing Notice of Breaches. 8.1 If Covered Entity determines that a Breach of PHI for which Business Associate was responsible, and if requested by Covered Entity, Business Associate shall provide notice to the Individual whose PHI has been the subject of the Breach. When so requested, Business Associate shall consult with Covered Entity about the timeliness, content and method of notice, and shall receive Covered Entity’s approval concerning these elements. Business Associate shall be responsible for the cost of notice and related remedies. 8.2 The notice to affected Individuals shall be provided as soon as reasonably possible and in no case later than sixty (60) calendar days after Business Associate reported the Breach to Covered Entity. 8.3 The notice to affected Individuals shall be written in plain language and shall include, to the extent possible: 1) a brief description of what happened; 2) a description of the types of Unsecured PHI that were involved in the Breach; 3) any steps Individuals can take to protect themselves from potential harm resulting from the Breach; 4) a brief description of what the Business Associate is doing to investigate the Breach to mitigate harm to Individuals and to protect against further Breaches; and 5) contact procedures for Individuals to ask questions or obtain additional information, as set forth in 45 CFR § 164.404(c). 8.4 Business Associate shall notify Individuals of Breaches as specified in 45 CFR § 164.404(d) (methods of Individual notice). In addition, when a Breach involves more STATE OF VERMONT Contract # Page 20 of 29 than 500 residents of Vermont, Business Associate shall, if requested by Covered Entity, notify prominent media outlets serving Vermont, following the requirements set forth in 45 CFR § 164.406.

Providing Notice of Breaches. 8.1 If Covered Entity determines that a Breach of PHI for which Business Associate was responsible, and if requested by Covered Entity, Business Associate shall provide notice to the Individual whose PHI has been the subject of the Breach. When so requested, Business Associate shall consult with Covered Entity about the timeliness, content and method of notice, and shall receive Covered Entity’s approval concerning these elements. Business Associate shall be responsible for the cost of notice and related remedies. 8.2 The notice to affected Individuals shall be provided as soon as reasonably possible and in no case later than sixty (60) calendar days after Business Associate reported the Breach to Covered Entity. 8.3 The notice to affected Individuals shall be written in plain language and shall include, to the extent possible: 1) a brief description of what happened; 2) a description of the types of Unsecured PHI that were involved in the Breach; 3) any steps Individuals can take to protect themselves from potential harm resulting from the Breach; 4) a brief description of what the Business Associate is doing to investigate the Breach to mitigate harm to Individuals and to protect against further Breaches; and 5) contact procedures for Individuals to ask questions or obtain additional information, as set forth in 45 CFR § 164.404(c).for 8.4 Business Associate shall notify Individuals of Breaches as specified in 45 CFR § 164.404(d) (methods of Individual notice). In addition, when a Breach involves more than 500 residents of Vermont, Business Associate shall, if requested by Covered Entity, notify prominent media outlets serving Vermont, following the requirements set forth in 45 CFR § 164.406.

Providing Notice of Breaches. 8.1 If Covered Entity determines that a Breach of PHI for which Business Associate was responsible, and if requested by Covered Entity, Business Associate shall provide notice to the Individual whose PHI has been the subject of the Breach. When so requested, Business Associate shall consult with Covered Entity about the timeliness, content and method of notice, and shall receive Covered Entity’s approval concerning these elements. Business Associate shall be responsible for the cost of notice and related remedies. 8.2 . The notice to affected Individuals shall be provided as soon as reasonably possible and in no case later than sixty (60) 60 calendar days after Business Associate reported the Breach to Covered Entity. 8.3 . The notice to affected Individuals shall be written in plain language and shall include, to the extent possible: , 1) a brief description of what happened; , 2) a description of the types of Unsecured PHI that were involved in the Breach; , 3) any steps Individuals can take to protect themselves from potential harm resulting from the Breach; , 4) a brief description of what the Business Associate is doing to investigate the Breach to mitigate harm to Individuals and to protect against further Breaches; , and 5) contact procedures for Individuals to ask questions or obtain additional information, as set forth in 45 CFR § 164.404(c). 8.4 . Business Associate shall notify Individuals of Breaches as specified in 45 CFR § 164.404(d) (methods of Individual notice). In addition, when a Breach involves more than 500 residents of Vermont, Business Associate shall, if requested by Covered Entity, notify prominent media outlets serving Vermont, following the requirements set forth in 45 CFR § 164.406.

Providing Notice of Breaches. 8.1 If Covered Entity determines that a Breach of PHI for which Business Associate was responsible, and if requested by Covered Entity, Business Associate shall provide notice to the Individual whose PHI has been the subject of the Breach. When so requested, Business Associate shall consult with Covered Entity about the timeliness, content and method of notice, and shall receive Covered Entity’s approval concerning these elements. Business Associate shall be responsible for the cost of notice and related remedies. 8.2 The notice to affected Individuals shall be provided as soon as reasonably possible and in no case later than sixty (60) calendar days after Business Associate reported the Breach to Covered Entity. 8.3 The notice to affected Individuals shall be written in plain language and shall include, to the extent possible: 1) a brief description of what happened; 2) a description of the types of Unsecured PHI that were involved in the Breach; 3) any steps Individuals can take to protect themselves from potential harm resulting from the Breach; 4) a brief description of what the Business Associate is doing to investigate the Breach to mitigate harm to Individuals and to protect against further Breaches; and 5) contact procedures for Individuals to ask questions or obtain additional information, as set forth in 45 CFR § 164.404(c). 8.4 Business Associate shall notify Individuals of Breaches as specified in 45 CFR § 164.404(d) (methods of Individual notice). In addition, when a Breach involves more than 500 residents of Vermont, Business Associate shall, if requested by Covered Entity, notify prominent media outlets serving Vermont, following the requirements set forth in 45 CFR § 164.406.,