To HHS. The Business Associate shall cooperate with the Covered Entity to provide notice to the Secretary of HHS, of unsecured PHI that has been acquired or disclosed in a breach. If the breach was with respect to five hundred (500) or more individuals, such notice must be provided immediately. If the breach was with respect to less than five hundred (500) individuals, the Business Associate may maintain a log of such breach occurring and annually submit such log to the Covered Entity so that it may satisfy its obligation to notify the Secretary of HHS documenting such breaches occurring in the year involved.
Appears in 7 contracts
Samples: Business Associate Agreement (Baa), Business Associate Agreement (Baa), Business Associate Agreement (Baa)
