Reporting of Breaches and Improper Disclosures Sample Clauses

Reporting of Breaches and Improper Disclosures. 1. A breach is the unauthorized acquisition, access, use, or disclosure of PHI in a manner not permitted by HIPAA which compromises the security or privacy of such information. In the event of a breach: 2. Of “Unsecured PHI” (i.e., PHI not rendered unusable, unreadable, or indecipherable to unauthorized individuals through the use of a technology or methodology specified by the Secretary in the guidance issued under section 1302(h)(2) of Pub.L. 111-5) Business Associate (or Subcontractor) accesses, creates, maintains, stores, transmits, modifies, destroys, or otherwise holds or uses on behalf of Covered Entity, Business Associate shall provide notice to Covered Entity, without unreasonable delay, but in no later than 30 days aYer discovering the Breach. The notice shall include (i) identification of each individual whose PHI has been, or is reasonably believed to have been, accessed, acquired, or disclosed during the Breach; (ii) date of the Breach, if known; (iii) scope of the Breach; (iv) description of the Business Associate’s response to the Breach; and (v) any other reasonable information requested by Covered Entity. 3. Business Associate (or Subcontractor as applicable) shall conduct a risk assessment of the Breach, and mitigate, to the extent practicable, any harmful effect of such Breach known to Business Associate. A Breach of Unsecured PHI is discovered as of the first day on which such breach is known to Business Associate (including any person other than the individual committing the breach who is an employee, officer, Subcontractor, or another agent of Business Associate, as determined in accordance with the federal common law of agency) or should reasonably have been known to Business Associate following exercise of reasonable diligence. 4. Improper Disclosures Business Associate and Subcontractors agree to: 1. Comply with 45 C.F.R. Sections 164.308, 164.310, 164.312 and 164.316 as if they were a Covered Entity. 2. Use commercially reasonable efforts to secure PHI through technology safeguards that render such PHI unusable, unreadable and indecipherable to individuals unauthorized to acquire or otherwise have access to such PHI in accordance with HHS Guidance published at 74 Federal Register 19006 (April 17, 2009), or later regulations or guidance promulgated by HHS or issued by the National Institute for Standards and Technology (“NIST’) to protect PHI. 3. Report to Covered Entity any Security Incident, unauthorized or improper use or disclosure of ...
Sample 1
AutoNDA by SimpleDocs
Reporting of Breaches and Improper Disclosures. In the event of a Breach (as hereinafter defined) of any Unsecured (as hereinafter defined) Protected Health Information that Business Associate accesses, maintains, retains, modifies, records, stores, destroys, or otherwise holds or uses on behalf of Covered Entity, Business Associate shall report such Breach to Covered Entity within thirty (30) days. "
Sample 1
Reporting of Breaches and Improper Disclosures 
Sample 1Sample 2Sample 3See All (4)

Related to Reporting of Breaches and Improper Disclosures

  • Confidential Information Breach This shall mean, generally, an instance where an unauthorized person or entity accesses Confidential Information in any manner, including but not limited to the following occurrences: (1) any Confidential Information that is not encrypted or protected is misplaced, lost, stolen or in any way compromised; (2)one or more third parties have had access to or taken control or possession of any Confidential Information that is not encrypted or protected without prior written authorization from the State; (3) the unauthorized acquisition of encrypted or protected Confidential Information together with the confidential process or key that is capable of compromising the integrity of the Confidential Information; or (4) if there is a substantial risk of identity theft or fraud to the Client Agency, the Contractor, DAS or State.

  • HANDLING OF CONFIDENTIAL INFORMATION The Company agrees to undertake the following in relation to IHiS’ Confidential Information: to maintain the same in confidence and to use it only for the Purpose and for no other purpose; not to make any commercial use thereof; not to use the same for the benefit of itself or of any third party other than pursuant to a further agreement with IHiS; not to use the same for the purpose of guiding or conducting a search of any information, materials or sources, whether or not available to the public, for any purpose whatsoever, including without limitation, for the purpose of demonstrating that any information falls within one of the exceptions in Clause 1.1(b); not to copy, reproduce, reverse engineer or reduce to writing any part thereof except as may be reasonably necessary for the Purpose and that any copies, reproductions or reductions to writing so made shall be the property of IHiS; not to disclose the Confidential Information whether to its employees or to third parties except in confidence to such of its Representatives who have been informed of the confidential nature thereof and who need to know the same for the Purpose and that: such Representatives are contractually obliged (whether by their contracts of employment or service, or otherwise) not to disclose the same or to use the same otherwise than for the Purpose; and the Company shall enforce such obligations at its expense, and to such extent as may be required by IHiS, in the event of a breach thereof that relates to IHiS' Confidential Information; to ensure the compliance to this NDA (including sub-clauses (a) to (f) above) on the part of its Representatives to whom Confidential Information is disclosed; and to apply to the Confidential Information no lesser security measures and degree of care than those which the Company applies to its own confidential or proprietary information of similar nature, but in no event less than reasonable care, and which the Company warrants as being adequate protection of such information from unauthorised disclosure, copying or use. The Company, as the principal party, shall be responsible and held liable for any breach of this NDA by any of its Representatives. If the Company is uncertain as to whether any information is Confidential Information, the Company shall treat the information as if it was Confidential Information, unless otherwise agreed by IHiS in writing. The Company shall immediately notify IHiS of any unauthorised disclosure or use of the Confidential Information of which the Company becomes aware and will take all steps which IHiS may require in relation to such unauthorised disclosure or use, or to prevent further unauthorised disclosure or use. Notwithstanding the foregoing, the Company shall be entitled to make any disclosure of the Confidential Information as required by law, but shall give IHiS not less than TWO (2) business days' notice of such disclosure and shall consult with IHiS prior to such disclosure with a view to avoiding such disclosure, if legally possible.

  • Return or Destruction of Confidential Information If an Interconnection Party provides any Confidential Information to another Interconnection Party in the course of an audit or inspection, the providing Interconnection Party may request the other party to return or destroy such Confidential Information after the termination of the audit period and the resolution of all matters relating to that audit. Each Interconnection Party shall make Reasonable Efforts to comply with any such requests for return or destruction within ten days of receiving the request and shall certify in writing to the other Interconnection Party that it has complied with such request.

  • Employer Information The Employer shall supply full and timely information to the Administrator on all matters relating to the Executive’s compensation, death, Disability or Separation from Service, and such other information as the Administrator reasonably requires.

  • Return of material containing or pertaining to the Confidential Information 7.1 The Disclosing Party may, at any time, and in its sole discretion request the Receiving Party to return any material and/or data in whatever form containing, pertaining to or relating to Confidential Information disclosed pursuant to the terms of this Agreement and may, in addition request the Receiving Party to furnish a written statement to the effect that, upon such return, the Receiving Party has not retained in its possession, or under its control, either directly or indirectly, any such material and/or data. 7.2 If it is not practically able to do so, the Receiving Party shall destroy or ensure the destruction of all material and/or data in whatever form relating to the Confidential Information disclosed pursuant to the terms of this Agreement and delete, remove or erase or use best efforts to ensure the deletion, erasure or removal from any computer or database or document retrieval system under its or the Representatives' possession or control, all Confidential Information and all documents or files containing or reflecting any Confidential Information, in a manner that makes the deleted, removed or erased data permanently irrecoverable.The Receiving Party shall furnish the Disclosing Party with a written statement signed by one of its directors or duly authorized senior officers to the effect that all such material has been destroyed. 7.3 The Receiving Party shall comply with any request by the Disclosing Party in terms of this clause, within 7 (seven) business days of receipt of any such request.

  • Disciplinary Information There are no legal or disciplinary events to disclose in response to this item.

  • Trade Secrets and Proprietary Information (a) Executive recognizes and acknowledges that the Company, through the expenditure of considerable time and money, has developed and will continue to develop in the future information concerning customers, clients, marketing, products, services, business, research and development activities and operational methods of the Company and its customers or clients, contracts, financial or other data, technical data or any other confidential or proprietary information possessed, owned or used by the Company, the disclosure of which could or does have a material adverse effect on the Company, its business, any business it proposes to engage in, its operations, financial condition or prospects and that the same are confidential and proprietary and considered “confidential information” of the Company for the purposes of this Agreement. In consideration of his employment, Executive agrees that he will not, during or after the Term, without the consent of the Board make any disclosure of confidential information now or hereafter possessed by the Company, to any person, partnership, corporation or entity either during or after the term here of, except that nothing in this Agreement shall be construed to prohibit Executive from using or disclosing such information (a) if such disclosure is necessary in the normal course of the Company’s business in accordance with Company policies or instructions or authorization from the Board, (b) such information shall become public knowledge other than by or as a result of disclosure by a person not having a right to make such disclosure, or (c) subsequent to the Term, if such information shall have either (i) been developed by Executive independent of any of the Company’s confidential or proprietary information or (ii) been disclosed to Executive by a person not subject to a confidentiality agreement with or other obligation of confidentiality to the Company. For the purposes of Sections 6, 7 and 8 of this Agreement, the term “Company” shall include the Company, its parent, its subsidiaries and affiliates, other than affiliates whose relationship as an affiliate is derived solely from Executive’s interest in or position at the affiliate. (b) In the event that any trade secrets or other confidential information covered by Section 6(a) of this Agreement is required to be produced by Executive pursuant to legal process, Executive shall give the Company notice of such legal process within a reasonable time, but not later than ten (10) business days prior to the date such disclosure is to be made, unless Executive has received less notice, in which event Executive shall immediately notify the Company. The Company shall have the right to object to any such disclosure, and if the Company objects (at the Company’s cost and expense) in a timely manner so that Executive is not subject to penalties for failure to make such disclosure, Executive shall not make any disclosure until there has been a court determination on the Company’s objections. If disclosure is required by a court order, final beyond right of review, or if the Company does not object to the disclosure, Executive shall make disclosure only to the extent that disclosure is unequivocally required by the court order, and Executive will exercise reasonable efforts at the Company’s expense, to obtain reliable assurance that confidential treatment will be accorded the Confidential Information.

  • Handling Sensitive Personal Information and Breach Notification A. As part of its contract with HHSC Contractor may receive or create sensitive personal information, as section 521.002 of the Business and Commerce Code defines that phrase. Contractor must use appropriate safeguards to protect this sensitive personal information. These safeguards must include maintaining the sensitive personal information in a form that is unusable, unreadable, or indecipherable to unauthorized persons. Contractor may consult the “Guidance to Render Unsecured Protected Health Information Unusable, Unreadable, or Indecipherable to Unauthorized Individuals” issued by the U.S. Department of Health and Human Services to determine ways to meet this standard. B. Contractor must notify HHSC of any confirmed or suspected unauthorized acquisition, access, use or disclosure of sensitive personal information related to this Contract, including any breach of system security, as section 521.053 of the Business and Commerce Code defines that phrase. Contractor must submit a written report to HHSC as soon as possible but no later than 10 business days after discovering the unauthorized acquisition, access, use or disclosure. The written report must identify everyone whose sensitive personal information has been or is reasonably believed to have been compromised. C. Contractor must either disclose the unauthorized acquisition, access, use or disclosure to everyone whose sensitive personal information has been or is reasonably believed to have been compromised or pay the expenses associated with HHSC doing the disclosure if: 1. Contractor experiences a breach of system security involving information owned by HHSC for which disclosure or notification is required under section 521.053 of the Business and Commerce Code; or 2. Contractor experiences a breach of unsecured protected health information, as 45 C.F.R. §164.402 defines that phrase, and HHSC becomes responsible for doing the notification required by 45 C.F.R. §164.404. HHSC may, at its discretion, waive Contractor's payment of expenses associated with HHSC doing the disclosure.

  • Company Confidential Information The Subscriber acknowledges that the Company is engaged in business development including programs of research and development and the marketing of products and services. The Subscriber also recognizes the importance of protecting the Company’s trade secrets, confidential information and other proprietary information and related rights acquired through such Company’s expenditure of time, effort and money. Therefore, in consideration of the Company permitting the Subscriber to submit this subscription and have access to the Company’s information and/or Company’s confidential information otherwise coming to the Subscriber, the Subscriber agrees to be bound by the following terms and conditions with respect to the Company:

  • Third Party Confidential Information Consultant recognizes that the Company has received and in the future will receive from third parties their confidential or proprietary information subject to a duty on the Company’s part to maintain the confidentiality of such information and to use it only for certain limited purposes. Consultant agrees that at all times during the term of this Agreement and thereafter, Consultant owes the Company and such third parties a duty to hold all such confidential or proprietary information in the strictest confidence and not to use it or to disclose it to any person, firm, corporation, or other third party except as necessary in carrying out the Services for the Company consistent with the Company’s agreement with such third party.

Draft better contracts in just 5 minutes Get the weekly Law Insider newsletter packed with expert videos, webinars, ebooks, and more!