Reporting Privacy Breach Sample Clauses

Reporting Privacy Breach. BUSINESS ASSOCIATE will report to COMPANY any use or disclosure of COMPANY’s Protected Health Information not permitted by this Addendum or in writing by COMPANY. In addition, BUSINESS ASSOCIATE will report, following discovery and without unreasonable delay, but in no event later than 10 days following discovery, any “Breach” of “Unsecured Protected Health Information” as these terms are defined by the HITECH Act and any implementing regulations. BUSINESS ASSOCIATE shall cooperate with COMPANY in investigating the breach and in meeting COMPANY’s obligations under the HITECH Act and any other security breach notification laws. Any such report shall include the identification (if known) of each individual whose Unsecured Protected Health Information has been, or is reasonably believed by BUSINESS ASSOCIATE to have been, accessed, acquired, or disclosed during such breach. BUSINESS ASSOCIATE’s report will at least: 1. Identify the nature of the non-permitted access, use or disclosure, including date of the breach and the date of discovery of the breach; 2. Identify COMPANY’s Protected Health Information accessed, used or disclosed as part of the breach (e.g., full name, social security number, date of birth, etc.),; 3. Identify who made the non-permitted access, use or disclosure and who received the non- permitted disclosure; 4. Identify what corrective action BUSINESS ASSOCIATE took or will take to prevent further non-permitted access, uses or disclosures; 5. Identify what BUSINESS ASSOCIATE did or will do to mitigate any deleterious effect of the non-permitted access, use or disclosure; and 6. Provide such other information, including a written report, as COMPANY may reasonably request. B. Security Incidents. BUSINESS ASSOCIATE will report to COMPANY any attempted or successful (A) unauthorized access, use, disclosure, modification, or destruction of COMPANY’s Electronic Protected Health Information or (B) interference with BUSINESS ASSOCIATE’s system operations in BUSINESS ASSOCIATE’s information systems, of which BUSINESS ASSOCIATE becomes aware. BUSINESS ASSOCIATE will make this report upon COMPANY’s request, except if any such security incident resulted in a disclosure of COMPANY’s Protected Health Information not permitted by this Addendum, BUSINESS ASSOCIATE will make the report in accordance with Section 3.1A above.
AutoNDA by SimpleDocs

Related to Reporting Privacy Breach

  • Privacy Statement 6.1. The Parties agree to keep all information related to the signing and fulfillment of this Agreement confidential, and not to disclose it to any third parties, except for subcontractors involved in this agreement, unless prior written consent is obtained from the other Party. Should subcontractors be engaged under this agreement, they are required to adhere to its terms and conditions.

  • Data Breach In the event of an unauthorized release, disclosure or acquisition of Student Data that compromises the security, confidentiality or integrity of the Student Data maintained by the Provider the Provider shall provide notification to LEA within seventy-two (72) hours of confirmation of the incident, unless notification within this time limit would disrupt investigation of the incident by law enforcement. In such an event, notification shall be made within a reasonable time after the incident. Provider shall follow the following process:

  • Reporting Violations a) When appropriate, faculty members will submit timely written communication to their immediate supervisor any condition that comes to their attention that may, in their judgment, pose a threat to the health or safety of any person associated with the District.

  • Meteorological Data Reporting Requirement (Applicable to wind generation facilities only) The wind generation facility shall, at a minimum, be required to provide the Transmission Provider with site-specific meteorological data including: • Temperature (degrees Fahrenheit) • Wind speed (meters/second) • Wind direction (degrees from True North) • Atmosphere pressure (hectopascals) • Forced outage data (wind turbine and MW unavailability)

  • Data Protection and Privacy: Protected Health Information Party shall maintain the privacy and security of all individually identifiable health information acquired by or provided to it as a part of the performance of this Agreement. Party shall follow federal and state law relating to privacy and security of individually identifiable health information as applicable, including the Health Insurance Portability and Accountability Act (HIPAA) and its federal regulations.

  • Data Breaches A. Upon the discovery by the Contractor of a confirmed breach of security that results in the unauthorized release, disclosure, or acquisition of student data, the Contractor shall provide initial notice to the Board as soon as reasonably possible, after such discovery (“Initial Notice”). The Initial Notice shall be delivered to the Board by electronic mail to Superintendent Xxxxxxx X. Xxxx, xxxxx@xxxxxxxxxxxx.xxx or to the contact currently on file and shall include the following information, to the extent known at the time of notification:

  • CHILD ABUSE REPORTING CONTRACTOR hereby agrees to annually train all staff members, including volunteers, so that they are familiar with and agree to adhere to its own child and dependent adult abuse reporting obligations and procedures as specified in California Penal Code section 11165.7, AB 1432, and Education Code 44691. To protect the privacy rights of all parties involved (i.e., reporter, child and alleged abuser), reports will remain confidential as required by law and professional ethical mandates. A written statement acknowledging the legal requirements of such reporting and verification of staff adherence to such reporting shall be submitted to the LEA.

  • Child Abuse Reporting Requirement Grantee will:

  • Reporting of Non-Force Majeure Events Each Party (the “Notifying Party”) shall notify the other Parties when the Notifying Party becomes aware of its inability to comply with the provisions of this Agreement for a reason other than a Force Majeure event. The Parties agree to cooperate with each other and provide necessary information regarding such inability to comply, including the date, duration, reason for the inability to comply, and corrective actions taken or planned to be taken with respect to such inability to comply. Notwithstanding the foregoing, notification, cooperation or information provided under this Article shall not entitle the Party receiving such notification to allege a cause for anticipatory breach of this Agreement.

  • Privacy Compliance The Provider shall comply with all applicable federal, state, and local laws, rules, and regulations pertaining to Student Data privacy and security, all as may be amended from time to time.

Time is Money Join Law Insider Premium to draft better contracts faster.