Breach Notification a. In the event of a Breach of unsecured PHI or disclosure that compromises the privacy or security of PHI obtained from DSHS or involving DSHS clients, Business Associate will take all measures required by state or federal law.
b. Business Associate will notify DSHS within one (1) business day by telephone and in writing of any acquisition, access, Use or disclosure of PHI not allowed by the provisions of this Contract or not authorized by HIPAA Rules or required by law of which it becomes aware which potentially compromises the security or privacy of the Protected Health Information as defined in 45 CFR 164.402 (Definitions).
c. Business Associate will notify the DSHS Contact shown on the cover page of this Contract within one (1) business day by telephone or e-mail of any potential Breach of security or privacy of PHI by the Business Associate or its Subcontractors or agents. Business Associate will follow telephone or e-mail notification with a faxed or other written explanation of the Breach, to include the following: date and time of the Breach, date Breach was discovered, location and nature of the PHI, type of Breach, origination and destination of PHI, Business Associate unit and personnel associated with the Breach, detailed description of the Breach, anticipated mitigation steps, and the name, address, telephone number, fax number, and e-mail of the individual who is responsible as the primary point of contact. Business Associate will address communications to the DSHS Contact. Business Associate will coordinate and cooperate with DSHS to provide a copy of its investigation and other information requested by DSHS, including advance copies of any notifications required for DSHS review before disseminating and verification of the dates notifications were sent.
d. If DSHS determines that Business Associate or its Subcontractor(s) or agent(s) is responsible for a Breach of unsecured PHI:
(1) requiring notification of Individuals under 45 CFR § 164.404 (Notification to Individuals), Business Associate bears the responsibility and costs for notifying the affected Individuals and receiving and responding to those Individuals’ questions or requests for additional information;
(2) requiring notification of the media under 45 CFR § 164.406 (Notification to the media), Business Associate bears the responsibility and costs for notifying the media and receiving and responding to media questions or requests for additional information;
(3) requiring notification of the U.S. Department of Health and Human Services Secretary under 45 CFR § 164.408 (Notification to the Secretary), Business Associate bears the responsibility and costs for notifying the Secretary and receiving and responding to the Secretary’s questions or requests for additional information; and
(4) DSHS will take appropriate remedial measures up to termination of this Contract.
Data Breach Notification Seller will promptly notify Buyer of any actual or potential exposure or misappropriation of Buyer data ("breach") that comes to Seller's attention. Seller will cooperate with Xxxxx and in investigating any such breach, at Xxxxxx's expense. Seller will likewise cooperate with Buyer and, as applicable, with law enforcement agencies in any effort to notify injured or potentially injured parties, and such cooperation will be at Seller's expense, except to the extent that the breach was caused by Xxxxx. The remedies and obligations set forth in this subsection are in addition to any others Buyer may have, including, but not limited to, any requirements in the “Privacy, Confidentiality, and Security” provisions of this Agreement.
Security Breach Notification In addition to the information enumerated in Article V, Section 4(1) of the DPA Standard Clauses, any Security Breach notification provided by the Provider to the LEA shall include:
a. A list of the students whose Student Data was involved in or is reasonably believed to have been involved in the breach, if known; and
b. The name and contact information for an employee of the Provider whom parents may contact to inquire about the breach.
Mitigation of Harmful Effects To mitigate, to the extent practicable, any harmful effect 8 that is known to CONTRACTOR of a use or disclosure of DHCS PI or PII by CONTRACTOR or its 9 subcontractors in violation of this Personal Information Privacy and Security Contract.
Consent to Breach Not Waiver No term or provision of this Contract shall be deemed waived and no breach excused, unless such waiver or consent shall be in writing and signed by the party claimed to have waived or consented. Any consent by any party to, or waiver of, a breach by the other, whether express or implied, shall not constitute consent to, waiver of, or excuse for any other different or subsequent breach.
Personal Data Breach Notification SAP will notify Customer without undue delay after becoming aware of any Personal Data Breach and provide reasonable information in its possession to assist Customer to meet Customer’s obligations to report a Personal Data Breach as required under Data Protection Law. SAP may provide such information in phases as it becomes available. Such notification shall not be interpreted or construed as an admission of fault or liability by SAP.
Security Breach Notice and Reporting The Contractor shall have policies and procedures in place for the effective management of Security Breaches, as defined below, which shall be made available to the State upon request.
SUCCESSORS; PERSONS ENTITLED TO BENEFIT OF AGREEMENT This Agreement shall inure to the benefit of and be binding upon the several Underwriters, the Company and their respective successors and assigns. Nothing expressed or mentioned in this Agreement is intended or shall be construed to give any person, other than the persons mentioned in the preceding sentence, any legal or equitable right, remedy or claim under or in respect of this Agreement, or any provisions herein contained, this Agreement and all conditions and provisions hereof being intended to be and being for the sole and exclusive benefit of such persons and for the benefit of no other person; except that the representations, warranties, covenants, agreements and indemnities of the Company contained in this Agreement shall also be for the benefit of the Underwriter Indemnified Parties, and the indemnities of the several Underwriters shall be for the benefit of the Company Indemnified Parties. It is understood that each Underwriter’s responsibility to the Company is solely contractual in nature and the Underwriters do not owe the Company, or any other party, any fiduciary duty as a result of this Agreement. No purchaser of any of the Stock from any Underwriter shall be deemed to be a successor or assign by reason merely of such purchase.
Independence from Material Breach Determination Except as set forth in Section X.D.1.c, these provisions for payment of Stipulated Penalties shall not affect or otherwise set a standard for OIG’s decision that Xxxxx has materially breached this IA, which decision shall be made at OIG’s discretion and shall be governed by the provisions in Section X.D, below.
Procedures and Presumptions for Determination of Entitlement to Indemnification It is the intent of this Agreement to secure for Indemnitee rights of indemnity that are as favorable as may be permitted under the DGCL and public policy of the State of Delaware. Accordingly, the parties agree that the following procedures and presumptions shall apply in the event of any question as to whether Indemnitee is entitled to indemnification under this Agreement:
a. To obtain indemnification under this Agreement, Indemnitee shall submit to the Company a written request, including therein or therewith such documentation and information as is reasonably available to Indemnitee and is reasonably necessary to determine whether and to what extent Indemnitee is entitled to indemnification. The Secretary of the Company shall, promptly upon receipt of such a request for indemnification, advise the Board in writing that Indemnitee has requested indemnification. Notwithstanding the foregoing, any failure of Indemnitee to provide such a request to the Company, or to provide such a request in a timely fashion, shall not relieve the Company of any liability that it may have to Indemnitee unless, and to the extent that, such failure actually and materially prejudices the interests of the Company.
b. Upon written request by Indemnitee for indemnification pursuant to the first sentence of Section 6(a) hereof, a determination with respect to Indemnitee’s entitlement thereto shall be made in the specific case by one of the following four methods, which shall be at the election of the Board (1) by a majority vote of the disinterested directors, even though less than a quorum, (2) by a committee of disinterested directors designated by a majority vote of the disinterested directors, even though less than a quorum, (3) if there are no disinterested directors or if the disinterested directors so direct, by independent legal counsel in a written opinion to the Board, a copy of which shall be delivered to the Indemnitee, or (4) if so directed by the Board, by the stockholders of the Company. For purposes hereof, disinterested directors are those members of the Board who are not parties to the action, suit or proceeding in respect of which indemnification is sought by Indemnitee.
c. If the determination of entitlement to indemnification is to be made by Independent Counsel pursuant to Section 6(b) hereof, the Independent Counsel shall be selected as provided in this Section 6(c). The Independent Counsel shall be selected by the Board. Indemnitee may, within ten (10) days after such written notice of selection shall have been given, deliver to the Company a written objection to such selection; provided, however, that such objection may be asserted only on the ground that the Independent Counsel so selected does not meet the requirements of “Independent Counsel” as defined in Section 13 of this Agreement, and the objection shall set forth with particularity the factual basis of such assertion. Absent a proper and timely objection, the person so selected shall act as Independent Counsel. If a written objection is made and substantiated, the Independent Counsel selected may not serve as Independent Counsel unless and until such objection is withdrawn or a court has determined that such objection is without merit. If, within twenty (20) days after submission by Indemnitee of a written request for indemnification pursuant to Section 6(a) hereof, no Independent Counsel shall have been selected and not objected to, either the Company or Indemnitee may petition the Court of Chancery of the State of Delaware or other court of competent jurisdiction for resolution of any objection which shall have been made by the Indemnitee to the Company’s selection of Independent Counsel and/or for the appointment as Independent Counsel of a person selected by the court or by such other person as the court shall designate, and the person with respect to whom all objections are so resolved or the person so appointed shall act as Independent Counsel under Section 6(b) hereof. The Company shall pay any and all reasonable fees and expenses of Independent Counsel incurred by such Independent Counsel in connection with acting pursuant to Section 6(b) hereof, and the Company shall pay all reasonable fees and expenses incident to the procedures of this Section 6(c), regardless of the manner in which such Independent Counsel was selected or appointed.
d. In making a determination with respect to entitlement to indemnification hereunder, the person or persons or entity making such determination shall presume that Indemnitee is entitled to indemnification under this Agreement. Anyone seeking to overcome this presumption shall have the burden of proof and the burden of persuasion by clear and convincing evidence. Neither the failure of the Company (including by its directors or independent legal counsel) to have made a determination prior to the commencement of any action pursuant to this Agreement that indemnification is proper in the circumstances because Indemnitee has met the applicable standard of conduct, nor an actual determination by the Company (including by its directors or independent legal counsel) that Indemnitee has not met such applicable standard of conduct, shall be a defense to the action or create a presumption that Indemnitee has not met the applicable standard of conduct.
e. Indemnitee shall be deemed to have acted in good faith if Indemnitee’s action is based on the records or books of account of the Enterprise (as hereinafter defined), including financial statements, or on information supplied to Indemnitee by the officers of the Enterprise in the course of their duties, or on the advice of legal counsel for the Enterprise or on information or records given or reports made to the Enterprise by an independent certified public accountant or by an appraiser or other expert selected with reasonable care by the Enterprise. In addition, the knowledge and/or actions, or failure to act, of any director, officer, agent or employee of the Enterprise shall not be imputed to Indemnitee for purposes of determining the right to indemnification under this Agreement. Whether or not the foregoing provisions of this Section 6(e) are satisfied, it shall in any event be presumed that Indemnitee has at all times acted in good faith and in a manner he reasonably believed to be in or not opposed to the best interests of the Company. Anyone seeking to overcome this presumption shall have the burden of proof and the burden of persuasion by clear and convincing evidence.
f. If the person, persons or entity empowered or selected under Section 6 to determine whether Indemnitee is entitled to indemnification shall not have made a determination within sixty (60) days after receipt by the Company of the request therefor, the requisite determination of entitlement to indemnification shall be deemed to have been made and Indemnitee shall be entitled to such indemnification absent (i) a misstatement by Indemnitee of a material fact, or an omission of a material fact necessary to make Indemnitee’s statement not materially misleading, in connection with the request for indemnification, or (ii) a prohibition of such indemnification under applicable law; provided, however, that such sixty (60) day period may be extended for a reasonable time, not to exceed an additional thirty (30) days, if the person, persons or entity making such determination with respect to entitlement to indemnification in good faith requires such additional time to obtain or evaluate documentation and/or information relating thereto.
g. Indemnitee shall cooperate with the person, persons or entity making such determination with respect to Indemnitee’s entitlement to indemnification, including providing to such person, persons or entity upon reasonable advance request any documentation or information which is not privileged or otherwise protected from disclosure and which is reasonably available to Indemnitee and reasonably necessary to such determination. Any Independent Counsel, member of the Board or stockholder of the Company shall act reasonably and in good faith in making a determination regarding the Indemnitee’s entitlement to indemnification under this Agreement. Any costs or expenses (including attorneys’ fees and disbursements) incurred by Indemnitee in so cooperating with the person, persons or entity making such determination shall be borne by the Company (irrespective of the determination as to Indemnitee’s entitlement to indemnification) and the Company hereby indemnifies and agrees to hold Indemnitee harmless therefrom.
h. The Company acknowledges that a settlement or other disposition short of final judgment may be successful if it permits a party to avoid expense, delay, distraction, disruption and uncertainty. In the event that any action, claim or proceeding to which Indemnitee is a party is resolved in any manner other than by adverse judgment against Indemnitee (including, without limitation, settlement of such action, claim or proceeding with or without payment of money or other consideration) it shall be presumed that Indemnitee has been successful on the merits or otherwise in such action, suit or proceeding. Anyone seeking to overcome this presumption shall have the burden of proof and the burden of persuasion by clear and convincing evidence.
i. The termination of any Proceeding or of any claim, issue or matter therein, by judgment, order, settlement or conviction, or upon a plea of nolo contendere or its equivalent, shall not (except as otherwise expressly provided in this Agreement) of itself adversely affect the right of Indemnitee to indemnification or create a presumption that Indemnitee did not act in good faith and in a manner which he reasonably believed to be in or not opposed to the best interests of the Company or, with respect to any criminal Proceeding, that Indemnitee had reasonable cause to believe that his conduct was unlawful.
