Common use of Reporting Non-Permitted Use or Disclosure Clause in Contracts

Reporting Non-Permitted Use or Disclosure. Business Associate shall report to Covered Entity in writing each Use or Disclosure that is made by Business Associate, its employees, representatives, agents or subcontractors that is not specifically permitted by this BAA, of which Business Associate becomes aware, as well as each Security Incident, as defined in the Security Rule, of which Business Associate becomes aware and any Breaches of PHI as defined by federal and state laws of which Business Associate becomes aware. An initial report shall be made within five (5) business days from the time the Business Associate becomes aware of the non-permitted Use or Disclosure or Security Incident, followed by a written report, including risk assessment, to Covered Entity no later than fifteen (15) business days from the date the Business Associate becomes aware of the non-permitted Use or Disclosure or Security Incident.

Reporting Non-Permitted Use or Disclosure. Business Associate shall report to Covered Entity in writing each Use or Disclosure that is made by Business Associate, its employees, representatives, agents or subcontractors that is not specifically permitted by this BAA, of which Business Associate becomes aware, as well as each Security Incident, as defined in the Security Rule, of which Business Associate becomes aware and any Breaches of PHI as defined by federal and state laws of which Business Associate becomes aware. An initial report shall be made within five (5) business days from the time the Business Associate becomes aware of the non-non- permitted Use or Disclosure or Security Incident, followed by a written report, including risk assessment, to Covered Entity no later than fifteen (15) business days from the date the Business Associate becomes aware of the non-permitted Use or Disclosure or Security Incident.