Common use of Reporting to the County Clause in Contracts

Reporting to the County. 1. The Business Associate will report to the County within: a. Two (2) days of any suspected–or confirmed–access, use, or disclosure of PHI or PII, regardless of form, not permitted or required by this Addendum of which the Business Associate becomes aware; and b. Twenty-four (24) hours of discovery, any Security Incident of which the Business Associate is aware. 2. Such report shall include the identification of each individual whose unsecured PHI and PII has been, or is reasonably believed by the Business Associate to have been, accessed, acquired, or disclosed during such breach. 3. Reports of Security Incidents shall include a detailed description of each Security Incident, at a minimum, to include: (a) the date of the Security Incident; (b) the nature of the Security Incident; (c) the information involved, whether the information was accessed, disclosed, used, modified, destroyed, etc.;

Reporting to the County. 1. The Business Associate will report to the County within: a. Two (2) days of any suspected–or confirmed–access, use, or disclosure of PHI or PII, regardless of form, not permitted or required by this Addendum Agreement of which the Business Associate becomes aware; and b. Twenty-four (24) hours of discovery, any Security Incident of which the Business Associate is aware. 2. Such report shall include the identification of each individual whose unsecured PHI and PII has been, or is reasonably believed by the Business Associate to have been, accessed, acquired, or disclosed during such breach. 3. Reports of Security Incidents shall include a detailed description of each Security Incident, at a minimum, to include: (a) the date of the Security Incident; (b) the nature of the Security Incident; (c) the information involved, whether the information was accessed, disclosed, used, modified, destroyed, etc.;