Common use of Reporting of Unauthorized Disclosures or Misuse of Covered Data and Information Clause in Contracts

Reporting of Unauthorized Disclosures or Misuse of Covered Data and Information. The Site shall, within one (1) day of discovery, report to the University any use or disclosure of CDI not authorized by this Agreement or in writing by the University. The Site’s report shall identify: (i) the nature of the unauthorized use or disclosure, (ii) the CDI used or disclosed, (iii) who made the unauthorized use or received the unauthorized disclosure, (iv) what the Site has done or shall do to mitigate any deleterious effect of the unauthorized use or disclosure and (v) what corrective action the Site has taken or shall take to prevent future similar unauthorized use or disclosure. The Site shall provide such other information, including a written report, as reasonably requested by the University.