Common use of Reporting to Individuals Clause in Contracts

Reporting to Individuals. In the case of a breach of PHI or PII discovered by the Business Associate, the Business Associate shall first notify the County of the pertinent details of the breach and, upon prior approval of the County’s Privacy Officer, shall notify each individual whose unsecured PHI or PII has been, or is reasonably believed by the Business Associate to have been, accessed, acquired or disclosed as a result of such breach. Such notification shall be in writing by first-class mail to the individual (or the next of kin if the individual is deceased) at the last known address of the individual or next of kin, respectively, or, if specified as a preference by the individual, by electronic mail. Where there is insufficient or out-of-date contact information (including a phone number, email address, or any other form of appropriate communication) that precludes written (or, if specifically requested, electronic) notification to the individual, a substitute form of notice shall be provided, including, in the case that there are ten (10) or more individuals for which there is insufficient or out-of-date contact information, a conspicuous posting on the web site of the Business Associate involved or notice in major print of broadcast media, including major media in the geographic areas where the individuals affected by the breach are likely to reside. In any case deemed by the Business Associate to require urgency because of possible imminent misuse of unsecured PHI or PII, the Business Associate may also provide information to individuals by telephone or other means, as appropriate.

Reporting to Individuals. In the case of a breach of PHI or PII discovered by the Business Associate, the Business Associate shall first notify the County of the pertinent details of the breach and, upon prior approval of the County’s Privacy Officer, shall notify each individual whose unsecured PHI or PII has been, or is reasonably believed by the Business Associate to have been, accessed, acquired acquired, or disclosed as a result of such breach. Such notification shall be in writing by first-class mail to the individual (or the next of kin if the individual is deceased) at the last known address of the individual or next of kin, respectively, or, if specified as a preference by the individual, by electronic mail. Where there is insufficient or out-of-date contact information (including a phone number, email address, or any other form of appropriate communication) that precludes written (or, if specifically requested, electronic) notification to the individual, a substitute form of notice shall be provided, including, including − in the case that there are ten (10) or more individuals for which there is insufficient or out-of-date contact information, information − a conspicuous posting on the web site of the Business Associate involved or notice in major print of broadcast media, including major media in the geographic areas where the individuals affected by the breach are likely to reside. In any case deemed by the Business Associate to require urgency because of possible imminent misuse of unsecured PHI or PII, the Business Associate may also provide information to individuals by telephone or other means, as appropriate.

Reporting to Individuals. In the case of a breach of PHI or PII discovered by the Business Associate, the Business Associate shall first notify the County of the pertinent details of the breach and, upon prior approval of the County’s Privacy Officer, shall notify each individual whose unsecured PHI or PII has been, or is reasonably believed by the Business Associate to have been, accessed, acquired or disclosed as a result of such breach. Such notification shall be in writing by first-class mail to the individual (or the next of kin if the individual is deceased) at the last known address of the individual or next of kin, respectively, or, if specified as a preference by the individual, by electronic mail. Where there is insufficient or out-of-date contact information (including a phone number, email address, or any other form of appropriate communication) that precludes written (or, if specifically requested, electronic) notification to the individual, a substitute form of notice shall be provided, including, in the case that there are ten (10) or more individuals for which there is insufficient or out-of-date contact information, a conspicuous posting on the web site of the Business Associate involved or notice in major print of broadcast media, including major media in the geographic areas where the individuals affected by the breach are likely to reside. In any case deemed by the Business Associate to require urgency because of possible imminent misuse of unsecured PHI or PII, Attachment 2 the Business Associate may also provide information to individuals by telephone or other means, as appropriate.

Reporting to Individuals. In the case of a breach of PHI or PII discovered by the Business Associate, the Business Associate shall first notify the County of the pertinent details of the breach and, upon prior approval of the County’s Privacy Officer, shall notify each individual whose unsecured PHI or PII has been, or is reasonably believed by the Business Associate to have been, accessed, acquired or disclosed as a result of such breach. Such notification shall be in writing by first-class mail to the individual (or the next of kin if the individual is deceased) at the last known address of the individual or next of kin, respectively, or, if specified as a preference by the individual, by electronic mail. Where there is insufficient or out-of-date contact information (including a phone numberphonenumber, email address, or any other form of appropriate communication) that precludes written (or, if specifically requested, electronic) notification to the individual, a substitute form of notice shall be provided, including, in the case that there are ten (10) or more individuals for which there is insufficient or out-of-date contact information, a conspicuous posting on the web site of the Business Associate involved Associateinvolved or notice in major print of broadcast media, including major media in the geographic areas where the individuals affected by the breach are likely to reside. In any case deemed by the Business Associate to require urgency because of possible imminent misuse of unsecured PHI or PII, the Business Associate may also provide information to individuals by telephone or other means, as appropriate.

Reporting to Individuals. In the case of a breach of PHI or PII discovered by the Business Associate, the Business Associate shall first notify the County of the pertinent details of the breach and, upon prior approval of the County’s Privacy Officer, shall notify each individual whose unsecured PHI or PII has been, or is reasonably believed by the Business Associate to have been, accessed, acquired acquired, or disclosed as a result of such breach. Such notification shall be in writing by first-class mail to the individual (or the next of kin if the individual is deceased) at the last known address of the individual or next of kin, respectively, or, if specified as a preference by the individual, by electronic mail. Where there is insufficient or out-of-date contact information (including a phone number, email address, or any other form of appropriate communication) that precludes written (or, if specifically requested, electronic) notification to the individual, a substitute form of notice shall be provided, including, including  in the case that there are ten (10) or more individuals for which there is insufficient or out-of-date contact information, information  a conspicuous posting on the web site of the Business Associate involved or notice in major print of broadcast media, including major media in the geographic areas where the individuals affected by the breach are likely to reside. In any case deemed by the Business Associate to require urgency because of possible imminent misuse of unsecured PHI or PII, the Business Associate may also provide information to individuals by telephone or other means, as appropriate.

Reporting to Individuals. In the case of a breach of PHI or PII Protected. Health Information discovered by the Business Associate, the Business Associate shall first notify the County Covered Entity of the pertinent details of the breach and, and upon prior approval of the County’s Privacy Officer, Covered Entity shall notify each individual whose unsecured PHI or PII Protected Health Information has been, or is reasonably believed by the Business Associate to have been, accessed, acquired or disclosed as a result of such breach. Such notification shall be in writing by first-class mail to the individual Individual (or the next of kin if the individual is deceased) at the last known address of the individual or next of kin, respectively, or, if specified as a preference by the individual, by electronic mail. Where there is insufficient insufficient, or out-of-date contact contract information (including a phone number, email address, or any other form of appropriate communication) that precludes written (or, if specifically requested, electronic) notification to the individual, a substitute form of notice shall be provided, including, in the case that there are ten (10) or more individuals Individuals for which there is insufficient or out-of-out of date contact information, a conspicuous posting on the web Web site of the Business Associate covered entity involved or notice in major print of broadcast media, including major media in the geographic areas where the individuals affected by the breach are likely to reside. In any case deemed by the Business Associate to require urgency because of possible imminent misuse of unsecured PHI or PIIProtected Health Information, the Business Associate may also provide information to individuals by telephone or other means, as appropriate.