Common use of Unauthorized Use or Disclosure of PHI Clause in Contracts

Unauthorized Use or Disclosure of PHI. The Business Associate shall report to the Covered Entity any use or disclosure of the PHI not authorized in the Agreement or required by law of which it becomes aware. In such report, the Business Associate shall: A. Identify the nature of the unauthorized use or disclosure; B. Identify the PHI used or disclosed; C. Identify who made the unauthorized use or received the unauthorized disclosure; D. Identify what the Business Associate has done or will do to mitigate any negative effects of the unauthorized use or disclosure; E. Identify what corrective action the Business Associate has taken or shall take to prevent future similar unauthorized use or disclosure; and F. Provide such other information, including a written report, as reasonably requested by the Covered Entity.