Common use of Reports of Breach Clause in Contracts

Reports of Breach. Per the Health Information Technology for Economic and Clinical Health (HITECH) Act, Title XIII of Division A and Title IV of Division B of the American Recovery and Reinvestment Act of 2009 (ARRA) Public. Law 111-5, Business Associate agrees to report to Covered Entity as soon as possible any use or disclosure of the protected health information not provided for by this Contract of which it becomes aware. If a breach of unsecured protected health information occurs at or by a Business Associate, the Business Associate must notify the Covered Entity no later than 60 days from the discovery of the breach. To the extent possible, the Business Associate should provide the Covered Entity with the identification of each individual affected by the breach as well as any information required to be provided by the Covered Entity in its notification to affected individuals.