Common use of Reporting Security Incidents Clause in Contracts

Reporting Security Incidents. CONTRACTOR agrees to report to THE COUNTY any Security Incident immediately upon becoming aware of such. CONTRACTOR further agrees to provide THE COUNTY with the following information regarding the Security Incident as soon as possible, but no more than five (5) business days after becoming aware of the Security Incident: (1) a brief description of what happened, including the dates the Security Incident occurred and was discovered; (2) a reproduction of the PHI or EPHI involved in the Security Incident; and (3) a description of whether and how the PHI or EPHI involved in the Security Incident was rendered unusable, unreadable, or indecipherable to unauthorized individuals either by encryption or otherwise destroying the PHI or EPHI prior to disposal. If CONTRACTOR determines that it is infeasible to reproduce the PHI or EPHI involved in the Security Incident, CONTRACTOR agrees to notify THE COUNTY in writing of the conditions that make reproduction infeasible and any information CONTRACTOR has regarding the PHI or EPHI involved. CONTRACTOR agrees to cooperate in a timely fashion with THE COUNTY regarding all Security Incidents reported to THE COUNTY. CONTRACTOR agrees that THE COUNTY will review all Security Incidents reported by CONTRACTOR and THE COUNTY, in its sole discretion, will take steps in response, to the extent necessary or required by law including, but not limited to, (1) notifying the individual(s) whose PHI or EPHI was involved in the Security Incident, either in writing, via telephone, through the media, or by posting a notice on THE COUNTY’s website, or through a combination of those methods, of the Security Incident; (2) providing the individual(s) whose PHI or EPHI was involved in the Security Incident with credit monitoring and related services for a period of time to be determined by THE COUNTY, at no cost to the individual(s); and (3) providing notice of the Security Incident, as required by law, to the Secretary of the United States Department of Health and Human Services (“HHS”). CONTRACTOR agrees to reimburse THE COUNTY for all expenses incurred as a result of CONTRACTOR’s Security Incidents, including, but not limited to, expenses related to the activities described above. CONTRACTOR agrees that THE COUNTY will select the contractors and negotiate the contracts related to said expenses.

Reporting Security Incidents. CONTRACTOR Contractor agrees to report to THE COUNTY the City any Security Incident immediately upon becoming aware of such. CONTRACTOR Contractor further agrees to provide THE COUNTY the City with the following information regarding the Security Incident as soon as possible, but no more than five (5) business days after becoming aware of the Security Incident: (1) a brief description of what happened, including the dates the Security Incident occurred and was discovered; (2) a reproduction of the PHI or EPHI involved in the Security Incident; and (3) a description of whether and how the PHI or EPHI involved in the Security Incident was rendered unusable, unreadable, or indecipherable to unauthorized individuals either by encryption or otherwise destroying the PHI or EPHI prior to disposal. If CONTRACTOR Contractor determines that it is infeasible to reproduce the PHI or EPHI involved in the Security Incident, CONTRACTOR the Contractor agrees to notify THE COUNTY the City in writing of the conditions that make reproduction infeasible and any information CONTRACTOR the Contractor has regarding the PHI or EPHI involved. CONTRACTOR Contractor agrees to cooperate in a timely fashion with THE COUNTY the City regarding all Security Incidents reported to THE COUNTYthe City. CONTRACTOR agrees that THE COUNTY The City will review all Security Incidents reported by CONTRACTOR and THE COUNTY, in its sole discretion, Contractor. Contractor will take the following steps in response, to the extent necessary or required by law law, including, but not limited to, (1) notifying the individual(s) whose PHI or EPHI was involved in the Security Incident, either in writing, via telephone, through the media, or by posting a notice on THE COUNTYthe City’s website, or through a combination of those methods, of the Security Incident; and (2) providing the individual(s) whose PHI or EPHI was involved in the Security Incident with credit monitoring and related services for a period of time to be determined by THE COUNTYthe City, at no cost to the individual(s); and (3) providing individuals. The City, to the extent necessary or required by law, will provide notice of the Security Incident, as required by law, to the Secretary of the United States Department of Health and Human Services (“HHS”). CONTRACTOR Contractor agrees to reimburse THE COUNTY the City for all expenses incurred as a result of CONTRACTORContractor’s Security Incidents, including, but not limited to, expenses related to the activities described above. CONTRACTOR Contractor agrees that THE COUNTY the City will select the contractors Contractors and negotiate the contracts related to said expenses.

Reporting Security Incidents. CONTRACTOR agrees to report to THE COUNTY HEALTH DISTRICT any Security Incident immediately upon becoming aware of such. CONTRACTOR further agrees to provide THE COUNTY HEALTH DISTRICT with the following information regarding the Security Incident as soon as possible, but no more than five (5) business days after becoming aware of the Security Incident: : (1) a brief description of what happened, including the dates the Security Incident occurred and was discovered; (2) a reproduction of the PHI or EPHI involved in the Security Incident; and (3) a description of whether and how the PHI or EPHI involved in the Security Incident was rendered unusable, unreadable, or indecipherable to unauthorized individuals either by encryption or otherwise destroying the PHI or EPHI prior to disposal. If CONTRACTOR determines that it is infeasible to reproduce the PHI or EPHI involved in the Security Incident, CONTRACTOR agrees to notify THE COUNTY HEALTH DISTRICT in writing of the conditions that make reproduction infeasible and any information CONTRACTOR has regarding the PHI or EPHI involved. CONTRACTOR agrees to cooperate in a timely fashion with THE COUNTY HEALTH DISTRICT regarding all Security Incidents reported to THE COUNTYHEALTH DISTRICT. CONTRACTOR agrees that THE COUNTY HEALTH DISTRICT will review all Security Incidents reported by CONTRACTOR and THE COUNTYHEALTH DISTRICT, in its sole discretion, will take steps in response, to the extent necessary or required by law including, but not limited to, (1) notifying the individual(s) whose PHI or EPHI was involved in the Security Incident, either in writing, via telephone, through the media, or by posting a notice on THE COUNTYHEALTH DISTRICT’s website, or through a combination of those methods, of the Security Incident; (2) providing the individual(s) whose PHI or EPHI was involved in the Security Incident with credit monitoring and related services for a period of time to be determined by THE COUNTYHEALTH DISTRICT, at no cost to the individual(s); and (3) providing notice of the Security Incident, as required by law, to the Secretary of the United States Department of Health and Human Services (“HHS”). CONTRACTOR agrees to reimburse THE COUNTY HEALTH DISTRICT for all expenses incurred as a result of CONTRACTOR’s Security Incidents, including, but not limited to, expenses related to the activities described above. CONTRACTOR agrees that THE COUNTY HEALTH DISTRICT will select the contractors and negotiate the contracts related to said expenses.

Reporting Security Incidents. CONTRACTOR VENDOR agrees to report to THE COUNTY COMMUNITY any Security Incident immediately upon becoming aware of such. CONTRACTOR VENDOR further agrees to provide THE COUNTY COMMUNITY with the following information regarding the Security Incident as soon as possible, but no more than five (5) business days after becoming aware of the Security Incident: (1) a brief description of what happened, including the dates the Security Incident occurred and was discovered; (2) a reproduction of the PHI or EPHI involved in the Security Incident; and (3) a description of whether and how the PHI or EPHI involved in the Security Incident was rendered unusable, unreadable, or indecipherable to unauthorized individuals either by encryption or otherwise destroying the PHI or EPHI prior to disposal. If CONTRACTOR VENDOR determines that it is infeasible to reproduce the PHI or EPHI involved in the Security Incident, CONTRACTOR VENDOR agrees to notify THE COUNTY COMMUNITY in writing of the conditions that make reproduction infeasible and any information CONTRACTOR VENDOR has regarding the PHI or EPHI involved. CONTRACTOR VENDOR agrees to cooperate in a timely fashion with THE COUNTY COMMUNITY regarding all Security Incidents reported to THE COUNTYCOMMUNITY. CONTRACTOR VENDOR agrees that THE COUNTY COMMUNITY will review all Security Incidents reported by CONTRACTOR VENDOR and THE COUNTYCOMMUNITY, in its sole discretion, will take steps in response, to the extent necessary or required by law including, but not limited to, (1) notifying the individual(s) whose PHI or EPHI was involved in the Security Incident, either in writing, via telephone, through the media, or by posting a notice on THE COUNTYCOMMUNITY’s website, or through a combination of those methods, of the Security Incident; (2) providing the individual(s) whose PHI or EPHI was involved in the Security Incident with credit monitoring and related services for a period of time to be determined by THE COUNTYCOMMUNITY, at no cost to the individual(s); and (3) providing notice of the Security Incident, as required by law, to the Secretary of the United States Department of Health and Human Services (“HHS”). CONTRACTOR VENDOR agrees to reimburse THE COUNTY COMMUNITY for all expenses incurred as a result of CONTRACTORVENDOR’s Security Incidents, including, but not limited to, expenses related to the activities described above. CONTRACTOR VENDOR agrees that THE COUNTY COMMUNITY will select the contractors Vendors and negotiate the contracts related to said expenses.

Reporting Security Incidents. CONTRACTOR Contractor agrees to report to THE COUNTY the Department or Board any Security Incident immediately upon becoming aware of such. CONTRACTOR Contractor further agrees to provide THE COUNTY the Department or Board with the following information regarding the Security Incident as soon as possible, but no more than five (5) business days after becoming aware of the Security Incident: (1) a brief description of what happened, including the dates the Security Incident occurred and was discovered; (2) a reproduction of the PHI or EPHI involved in the Security Incident; and (3) a description of whether and how the PHI or EPHI involved in the Security Incident was rendered unusable, unreadable, or indecipherable to unauthorized individuals either by encryption or otherwise destroying the PHI or EPHI prior to disposal. If CONTRACTOR Contractor determines that it is infeasible to reproduce the PHI or EPHI involved in the Security Incident, CONTRACTOR the Contractor agrees to notify THE COUNTY the Department or Board in writing of the conditions that make reproduction infeasible and any information CONTRACTOR the Contractor has regarding the PHI or EPHI involved. CONTRACTOR Contractor agrees to cooperate in a timely fashion with THE COUNTY the Department or Board regarding all Security Incidents reported to THE COUNTYthe Department or Board. CONTRACTOR Contractor agrees that THE COUNTY the Department or Board will review all Security Incidents reported by CONTRACTOR Contractor and THE COUNTYthe Department or Board, in its sole discretion, will take the following steps in response, to the extent necessary or required by law law, including, but not limited to, (1) notifying the individual(s) whose PHI or EPHI was involved in the Security Incident, either in writing, via telephone, through the media, or by posting a notice on THE COUNTYthe Department or Board’s website, or through a combination of those methods, of the Security Incident; (2) providing the individual(s) whose PHI or EPHI was involved in the Security Incident with credit monitoring and related services for a period of time to be determined by THE COUNTYthe Department or Board, at no cost to the individual(s)individuals; and (3) providing notice of the Security Incident, as required by law, to the Secretary of the United States Department of Health and Human Services (“HHS”). CONTRACTOR Contractor agrees to reimburse THE COUNTY the Department or Board for all expenses incurred as a result of CONTRACTORContractor’s Security Incidents, including, but not limited to, expenses related to the activities described above. CONTRACTOR Contractor agrees that THE COUNTY the Department or Board will select the contractors Contractors and negotiate the contracts related to said expenses.

Reporting Security Incidents. CONTRACTOR Contractor agrees to report to THE COUNTY the Director and the City Attorney any Security Incident immediately upon becoming aware of such. CONTRACTOR Contractor further agrees to provide THE COUNTY the City with the following information regarding the Security Incident as soon as possible, but no more than five (5) business days Business Days after becoming aware of the Security Incident: (1) a brief description of what happened, including the dates the Security Incident occurred and was discovered; (2) a reproduction of the PHI or EPHI involved in the Security Incident; and (3) a description of whether and how the PHI or EPHI involved in the Security Incident was rendered unusable, unreadable, or indecipherable to unauthorized individuals either by encryption or otherwise destroying the PHI or EPHI prior to disposal. If CONTRACTOR Contractor determines that it is infeasible to reproduce the PHI or EPHI involved in the Security Incident, CONTRACTOR the Contractor agrees to notify THE COUNTY the City in writing of the conditions that make reproduction infeasible and any information CONTRACTOR the Contractor has regarding the PHI or EPHI involved. CONTRACTOR Contractor agrees to cooperate in a timely fashion with THE COUNTY the City regarding all Security Incidents reported to THE COUNTYthe City. CONTRACTOR agrees that THE COUNTY The City will review all Security Incidents reported by CONTRACTOR and THE COUNTY, in its sole discretion, Contractor. Contractor will take the following steps in response, to the extent necessary or required by law law, including, but not limited to, (1) notifying the individual(s) whose PHI or EPHI was involved in the Security Incident, either in writing, via telephone, through the media, or by posting a notice on THE COUNTYthe City’s website, or through a combination of those methods, of the Security Incident; and (2) providing the individual(s) whose PHI or EPHI was involved in the Security Incident with credit monitoring and related services for a period of time to be determined by THE COUNTYthe City, at no cost to the individual(s); and (3) providing individuals. The City, to the extent necessary or required by law, will provide notice of the Security Incident, as required by law, to the Secretary of the United States Department of Health and Human Services (“HHS”). CONTRACTOR Contractor agrees to reimburse THE COUNTY the City for all expenses incurred as a result of CONTRACTORContractor’s Security Incidents, including, but not limited to, expenses related to the activities described above. CONTRACTOR Contractor agrees that THE COUNTY the City will select the contractors Contractors and negotiate the contracts related to said expenses.

Reporting Security Incidents. CONTRACTOR agrees to report to THE COUNTY any Security Incident immediately upon becoming aware of such. CONTRACTOR further agrees to provide THE COUNTY with the following information regarding the Security Incident as soon as possible, but no more than five (5) business days after becoming aware of the Security Incident: (1) a brief description of what happened, including the dates the Security Incident occurred and was discovered; (2) a reproduction of the PHI or EPHI involved in the Security Incident; and (3) a description of whether and how the PHI or PHIor EPHI involved in the Security Incident was rendered unusable, unreadable, or indecipherable to unauthorized individuals either by encryption or otherwise destroying the PHI or EPHI prior to disposal. If CONTRACTOR determines that it is infeasible to reproduce the PHI or EPHI involved in the Security Incident, CONTRACTOR agrees to notify THE COUNTY in writing of the conditions that make reproduction infeasible and any information CONTRACTOR has regarding the PHI or EPHI involved. CONTRACTOR agrees to cooperate in a timely fashion with THE COUNTY regarding all Security Incidents reported to THE COUNTY. CONTRACTOR agrees that THE COUNTY will review all Security Incidents reported by CONTRACTOR and THE COUNTY, in its sole discretion, will take steps in response, to the extent necessary or required by law including, but not limited to, (1) notifying the individual(s) whose PHI or EPHI was involved in the Security Incident, either in writing, via telephone, through the media, or by posting a notice on THE COUNTY’s website, or through a combination of those methods, of the Security Incident; (2) providing the individual(s) whose PHI or EPHI was involved in the Security Incident SecurityIncident with credit monitoring and related services for a period of time to be determined by THE COUNTY, at no cost to the individual(s); and (3) providing notice of the Security Incident, as required by law, to the Secretary of the United States Department of Health and Human Services (“HHS”). CONTRACTOR agrees to reimburse THE COUNTY for all expenses incurred as a result of resultof CONTRACTOR’s Security Incidents, including, but not limited to, expenses related to the tothe activities described above. CONTRACTOR agrees that THE COUNTY will select the contractors and negotiate the contracts related to said expenses.

Reporting Security Incidents. CONTRACTOR XXXXXXXXXX agrees to report to THE COUNTY any Security Incident immediately upon becoming aware of such. CONTRACTOR further agrees to provide THE COUNTY with the following information regarding the Security Incident as soon as possible, but no more than five (5) business days after becoming aware of the Security Incident: (1) a brief description of what happened, including the dates the Security Incident occurred and was discovered; (2) a reproduction of the PHI or EPHI involved in the Security Incident; and (3) a description of whether and how the PHI or EPHI involved in the Security Incident was rendered unusable, unreadable, or indecipherable to unauthorized individuals either by encryption or otherwise destroying the PHI or EPHI prior to disposal. If CONTRACTOR determines that it is infeasible to reproduce the PHI or EPHI involved in the Security Incident, CONTRACTOR agrees to notify THE COUNTY in writing of the conditions that make reproduction infeasible and any information CONTRACTOR has regarding the PHI or EPHI involved. CONTRACTOR XXXXXXXXXX agrees to cooperate in a timely fashion with THE COUNTY regarding all Security Incidents reported to THE COUNTY. CONTRACTOR agrees that THE COUNTY will review all Security Incidents reported by CONTRACTOR and THE COUNTY, in its sole discretion, will take steps in response, to the extent necessary or required by law including, but not limited to, (1) notifying the individual(s) whose PHI or EPHI was involved in the Security Incident, either in writing, via telephone, through the media, or by posting a notice on THE COUNTY’s website, or through a combination of those methods, of the Security Incident; (2) providing the individual(s) whose PHI or EPHI XXXX was involved in the Security Incident with credit monitoring and related services for a period of time to be determined by THE COUNTY, at no cost to the individual(s); and (3) providing notice of the Security Incident, as required by law, to the Secretary of the United States Department of Health and Human Services (“HHS”). CONTRACTOR XXXXXXXXXX agrees to reimburse THE COUNTY for all expenses incurred as a result of CONTRACTOR’s Security Incidents, including, but not limited to, expenses related to the activities described above. CONTRACTOR XXXXXXXXXX agrees that THE COUNTY will select the contractors and negotiate the contracts related to said expenses.

Reporting Security Incidents. CONTRACTOR AGENT agrees to report to THE COUNTY CHC any Security Incident immediately upon becoming aware of such. CONTRACTOR AGENT further agrees to provide THE COUNTY CHC with the following information regarding the Security Incident as soon as possible, but no more than five (5) business days after becoming aware of the Security Incident: (1) a brief description of what happened, including the dates the Security Incident occurred and was discovered; (2) a reproduction of the PHI or EPHI involved in the Security Incident; and (3) a description of whether and how the PHI or EPHI involved in the Security Incident was rendered unusable, unreadable, or indecipherable to unauthorized individuals either by encryption or otherwise destroying the PHI or EPHI prior to disposal. If CONTRACTOR AGENT determines that it is infeasible to reproduce the PHI or EPHI involved in the Security Incident, CONTRACTOR AGENT agrees to notify THE COUNTY CHC in writing of the conditions that make reproduction infeasible and any information CONTRACTOR AGENT has regarding the PHI or EPHI involved. CONTRACTOR AGENT agrees to cooperate in a timely fashion with THE COUNTY CHC regarding all Security Incidents reported to THE COUNTYCHC. CONTRACTOR AGENT agrees that THE COUNTY CHC will review all Security Incidents reported by CONTRACTOR AGENT and THE COUNTYCHC, in its sole discretion, will take steps in response, to the extent necessary or required by law including, but not limited to, (1) notifying the individual(s) whose PHI or EPHI was involved in the Security Incident, either in writing, via telephone, through the media, or by posting a notice on THE COUNTYCHC’s website, or through a combination of those methods, of the Security Incident; (2) providing the individual(s) whose PHI or EPHI was involved in the Security Incident with credit monitoring and related services for a period of time to be determined by THE COUNTYCHC, at no cost to the individual(s); and (3) providing notice of the Security Incident, as required by law, to the Secretary of the United States Department of Health and Human Services (“HHS”). CONTRACTOR AGENT agrees to reimburse THE COUNTY CHC for all expenses incurred as a result of CONTRACTORAGENT’s Security Incidents, including, but not limited to, expenses related to the activities described above. CONTRACTOR AGENT agrees that THE COUNTY CHC will select the contractors AGENTs and negotiate the contracts related to said expenses.

Reporting Security Incidents. CONTRACTOR XXXXXX agrees to report to THE COUNTY DEPARTMENT any Security Incident immediately upon becoming aware of suchany violation. CONTRACTOR VENDOR further agrees to provide THE COUNTY DEPARTMENT with the following information regarding the Security Incident as soon as possible, but no more than five (5) business days after becoming aware of the Security Incident: (1) a brief description of what happened, including the dates the Security Incident occurred and was discovered; (2) a reproduction of the PHI or EPHI involved in the Security Incident; and (3) a description of whether and how the PHI or EPHI involved in the Security Incident was rendered unusable, unreadable, or indecipherable to unauthorized individuals either by encryption or otherwise destroying the PHI or EPHI prior to disposal. If CONTRACTOR VENDOR determines that it is infeasible to reproduce the PHI or EPHI involved in the Security Incident, CONTRACTOR XXXXXX agrees to notify THE COUNTY DEPARTMENT in writing of the conditions that make reproduction infeasible and any information CONTRACTOR VENDOR has regarding the PHI or EPHI involved. CONTRACTOR XXXXXX agrees to cooperate in a timely fashion with THE COUNTY DEPARTMENT regarding all Security Incidents reported to THE COUNTYDEPARTMENT. CONTRACTOR XXXXXX agrees that THE COUNTY DEPARTMENT will review all Security Incidents reported by CONTRACTOR VENDOR and THE COUNTYDEPARTMENT, in its sole discretion, will take steps in response, to the extent necessary or required by law including, but not limited to, (1) notifying the individual(s) whose PHI or EPHI was involved in the Security Incident, either in writing, via telephone, through the media, or by posting a notice on THE COUNTY’s DEPARTMENT's website, or through a combination of those methods, of the Security Incident; (2) providing the individual(s) whose PHI or EPHI was involved in the Security Incident with credit monitoring and related services for a period of time to be determined by THE COUNTYDEPARTMENT, at no cost to the individual(s); and (3) providing notice of the Security Incident, as required by law, to the Secretary of the United States Department of Health and Human Services (“"HHS”"). CONTRACTOR XXXXXX agrees to reimburse THE COUNTY DEPARTMENT for all expenses incurred as a result of CONTRACTORVENDOR’s Security Incidents, including, but not limited to, expenses related to the activities described above. CONTRACTOR XXXXXX agrees that THE COUNTY DEPARTMENT will select the contractors vendors and negotiate the contracts related to said expenses.

Reporting Security Incidents. CONTRACTOR agrees to report to THE COUNTY any Security Incident immediately upon becoming aware of such. CONTRACTOR further agrees to provide THE COUNTY with the following information regarding the Security Incident as soon as possible, but no more than five (5) business days after becoming aware of the Security Incident: : (1) a brief description of what happened, including the dates the Security Incident occurred and was discovered; (2) a reproduction of the PHI or EPHI involved in the Security Incident; and (3) a description of whether and how the PHI or EPHI involved in the Security Incident was rendered unusable, unreadable, or indecipherable to unauthorized individuals either by encryption or otherwise destroying the PHI or EPHI prior to disposal. If CONTRACTOR determines that it is infeasible to reproduce the PHI or EPHI involved in the Security Incident, CONTRACTOR agrees to notify THE COUNTY in writing of the conditions that make reproduction infeasible and any information CONTRACTOR has regarding the PHI or EPHI involved. CONTRACTOR agrees to cooperate in a timely fashion with THE COUNTY regarding all Security Incidents reported to THE COUNTY. CONTRACTOR agrees that THE COUNTY will review all Security Incidents reported by CONTRACTOR CONTRACTOR, and THE that COUNTY, in its sole discretion, will take steps in response, to the extent necessary or required by law including, but not limited to, , (1) notifying the individual(s) whose PHI or EPHI was involved in the Security Incident, either in writing, via telephone, through the media, or by posting a notice on THE COUNTY’s 's website, or through a combination of those methods, of the Security Incident; (2) providing the individual(s) whose PHI or EPHI was involved in the Security Incident with credit monitoring and related services for a period of time to be determined by THE COUNTY, at no cost to the individual(s); and (3) providing notice of the Security Incident, as required by law, to the Secretary of the United States Department of Health and Human Services (“"HHS”)") . CONTRACTOR agrees to reimburse THE COUNTY for all expenses incurred as a result of CONTRACTOR’s 's Security Incidents, including, but not limited to, expenses related to the activities described above. CONTRACTOR agrees that THE COUNTY will select the contractors and negotiate the contracts related to said expenses.

Reporting Security Incidents. CONTRACTOR Contractor agrees to report to THE COUNTY the City any Security Incident immediately upon becoming aware of such. CONTRACTOR Contractor further agrees to provide THE COUNTY the City with the following information regarding the Security Incident as soon as possible, but no more than five (5) business days after becoming aware of the Security Incident: (1) a brief description of what happened, including the dates the Security Incident occurred and was discovered; (2) a reproduction of the PHI or EPHI involved in the Security Incident; and (3) a description of whether and how the PHI or EPHI involved in the Security Incident was rendered unusable, unreadable, or indecipherable to unauthorized individuals either by encryption or otherwise destroying the PHI or EPHI prior to disposal. If CONTRACTOR Contractor determines that it is infeasible to reproduce the PHI or EPHI involved in the Security Incident, CONTRACTOR the Contractor agrees to notify THE COUNTY the City in writing of the conditions that make reproduction infeasible and any information CONTRACTOR the Contractor has regarding the PHI or EPHI involved. CONTRACTOR agrees to cooperate in a timely fashion with THE COUNTY regarding all Security Incidents reported to THE COUNTYthe City. CONTRACTOR agrees that THE COUNTY The City will review all Security Incidents reported by CONTRACTOR and THE COUNTY, in its sole discretion, Contractor. Contractor will take the following steps in response, to the extent necessary or required by law law, including, but not limited to, (1) notifying the individual(s) whose PHI or EPHI was involved in the Security Incident, either in writing, via telephone, through the media, or by posting a notice on THE COUNTYthe City’s website, or through a combination of those methods, of the Security Incident; and (2) providing the individual(s) whose PHI or EPHI was involved in the Security Incident with credit monitoring and related services for a period of time to be determined by THE COUNTYthe City, at no cost to the individual(s); and (3) providing individuals. The City, to the extent necessary or required by law, will provide notice of the Security Incident, as required by law, to the Secretary of the United States Department of Health and Human Services (“HHS”). CONTRACTOR Contractor agrees to reimburse THE COUNTY the City for all expenses incurred as a result of CONTRACTORContractor’s Security Incidents, including, but not limited to, expenses related to the activities described above. CONTRACTOR Contractor agrees that THE COUNTY the City will select the contractors Contractors and negotiate the contracts related to said expenses.