Common use of Reports of Unauthorized Access, Use or Disclosure Clause in Contracts

Reports of Unauthorized Access, Use or Disclosure. Business Associate shall report in writing to Participant, without unreasonable delay, (i) any use or disclosure of PHI that is not authorized by this Addendum or the DURSA including, but not limited to, Adverse Security Events, as defined in the DURSA, and (ii) any Breach of Unsecured Protected Health Information. Business Associate shall deliver such notice no later than five (5) calendar days after the date on which it (or any member of its workforce or its agent, except the person(s) responsible for the unauthorized use or disclosure or Breach), became aware, or in the exercise of reasonable diligence should have become aware, of such unauthorized use or disclosure or Breach. Notice of any unauthorized use or disclosure or Breach shall include the following information if know at the time of the Notice: (i) describe the event resulting in the unauthorized use or disclosure or Breach;