BREACH DISCOVERY AND NOTIFICATION. 17 1. Following the discovery of a Breach of Unsecured PHI, CONTRACTOR shall notify 18 COUNTY of such Breach, however both parties agree to a delay in the notification if so advised by a 19 law enforcement official pursuant to 45 CFR § 164.412.
20 a. A Breach shall be treated as discovered by CONTRACTOR as of the first day on which 21 such Breach is known to CONTRACTOR or, by exercising reasonable diligence, would have been 22 known to CONTRACTOR.
23 b. CONTRACTOR shall be deemed to have knowledge of a Breach, if the Breach is 24 known, or by exercising reasonable diligence would have known, to any person who is an employee, 25 officer, or other agent of CONTRACTOR, as determined by federal common law of agency.
26 2. CONTRACTOR shall provide the notification of the Breach immediately to the COUNTY 27 Privacy Officer. CONTRACTOR’s notification may be oral, but shall be followed by written 28 notification within twenty four (24) hours of the oral notification.
29 3. CONTRACTOR’s notification shall include, to the extent possible:
30 a. The identification of each Individual whose Unsecured PHI has been, or is reasonably 31 believed by CONTRACTOR to have been, accessed, acquired, used, or disclosed during the Breach;
32 b. Any other information that COUNTY is required to include in the notification to 33 Individual under 45 CFR §164.404 (c) at the time CONTRACTOR is required to notify COUNTY or 34 promptly thereafter as this information becomes available, even after the regulatory sixty (60) day 35 period set forth in 45 CFR § 164.410 (b) has elapsed, including:
36 1) A brief description of what happened, including the date of the Breach and the date 37 of the discovery of the Breach, if known;
1 2) A description of the types of Unsecured PHI that were involved in the Breach (such 2 as whether full name, social security number, date of birth, home address, account number, diagnosis, 3 disability code, or other types of information were involved);
4 3) Any steps Individuals should take to protect themselves from potential harm 5 resulting from the Breach;
6 4) A brief description of what CONTRACTOR is doing to investigate the Breach, to 7 mitigate harm to Individuals, and to protect against any future Breaches; and
8 5) Contact procedures for Individuals to ask questions or learn additional information, 9 which shall include a toll-free telephone number, an e-mail address, Web site, or postal address.
10 4. COUNTY may require CONTRACTOR to provide notice to th...
BREACH DISCOVERY AND NOTIFICATION. 17 1. Following the discovery of a Breach of Unsecured PHI, Contractor shall 18 notify County of such Breach, however both Parties agree to a delay in the notification if 19 so advised by a law enforcement official pursuant to 45 CFR § 164.412.
21 a. A Breach shall be treated as discovered by Contractor as of the first 22 day on which such Breach is known to Contractor or, by exercising reasonable diligence, 23 would have been known to Contractor.
25 b. Contractor shall be deemed to have knowledge of a Breach, if the 26 Breach is known, or by exercising reasonable diligence would have known, to any person 27 who is an employee, officer, or other agent of Contractor, as determined by federal 28 common law of agency.
30 2. Contractor shall provide the notification of the Breach immediately to the OCIT | CEO | SECURITY County Privacy Officer HCA Information Technology Security Officer Xxxxx Xx, CHPC, CHC, CHP 0000 X. Xx. Xxxxxxx Xxxxx Santa Ana, CA 92705 Office: (000) 000-0000 Xxxxx Xxxxxxxxxxx 000 X. Xxxxx Xxx Xxxx., 10th Floor Santa Ana, CA 00000 (000) 000-0000 31 County Privacy Officer at: 32 33 34 35 36 37 2 3
4 a. Contractor’s notification may be oral, but shall be followed by written E-Mail: xxxxx.xx@xxxxx.xxxxx.xxx xxxxxxxxxxxxxxxxxxx@xxxxx.xxxxx.xxx xxxxxxxxxxxx@xxxxx.xxx 5 notification within twenty-four (24) hours of the oral notification.
7 3. Contractor’s notification shall include, to the extent possible:
9 a. The identification of each Individual whose Unsecured PHI has 10 been, or is reasonably believed by Contractor to have been, accessed, acquired, used, 11 or disclosed during the Breach;
13 b. Any other information that County is required to include in the 14 notification to Individual under 45 CFR §164.404 (c) at the time Contractor is required to 15 notify County or promptly thereafter as this information becomes available, even after the 16 regulatory sixty (60) day period set forth in 45 CFR § 164.410 (b) has elapsed, including: 18 (1) A brief description of what happened, including the date of the 19 Breach and the date of the discovery of the Breach, if known;
BREACH DISCOVERY AND NOTIFICATION. 23 1. Following the discovery of a Breach of Unsecured PHI, CONTRACTOR shall notify 24 COUNTY of such Breach, however both parties agree to a delay in the notification if so advised by a 25 law enforcement official pursuant to 45 CFR § 164.412.
26 a. A Breach shall be treated as discovered by CONTRACTOR as of the first day on which 27 such Breach is known to CONTRACTOR or, by exercising reasonable diligence, would have been 28 known to CONTRACTOR.
29 b. CONTRACTOR shall be deemed to have knowledge of a Breach, if the Breach is 30 known, or by exercising reasonable diligence would have known, to any person who is an employee, 31 officer, or other agent of CONTRACTOR, as determined by federal common law of agency.
32 2. CONTRACTOR shall provide the notification of the Breach immediately to the COUNTY 33 Privacy Officer. CONTRACTOR’s notification may be oral, but shall be followed by written 34 notification within 24 hours of the oral notification.
35 3. CONTRACTOR’s notification shall include, to the extent possible:
36 a. The identification of each Individual whose Unsecured PHI has been, or is reasonably 37 believed by CONTRACTOR to have been, accessed, acquired, used, or disclosed during the Breach;
BREACH DISCOVERY AND NOTIFICATION. 23 1. Following the discovery of a Breach of Unsecured PHI, CONTRACTOR shall notify 24 COUNTY of such Breach, however both parties agree to a delay in the notification if so advised by a 25 law enforcement official pursuant to 45 CFR § 164.412.
BREACH DISCOVERY AND NOTIFICATION. 5.01 Following the discovery of a Breach of Unsecured PHI, CONTRACTOR shall notify CITY of such Breach, however, both parties may agree to a delay in the notification if so advised by a law enforcement official pursuant to 45 CFR §164.412.
5.01.1 A Breach shall be treated as discovered by CONTRACTOR as of the first day on which such Breach is known to CONTRACTOR or, by exercising reasonable diligence, would have been known to CONTRACTOR.
5.01.2 CONTRACTOR shall be deemed to have knowledge of a Breach, if the Breach is known, or by exercising reasonable diligence would have been known, to any person who is an employee, officer, or other agent of CONTRACTOR, as determined by the federal common law of agency.
5.02 CONTRACTOR shall provide the notification of the Breach immediately to the CITY DHS Executive Director or other designee.
5.02.1 CONTRACTOR'S initial notification may be oral, but shall be followed by written notification within 24 hours of the oral notification.
5.03 CONTRACTOR'S notification shall include, to the extent possible:
BREACH DISCOVERY AND NOTIFICATION. 25 1. Following the discovery of a Breach of Unsecured PHI, CONTRACTOR shall notify 26 COUNTY of such Breach, however both parties agree to a delay in the notification if so advised by a law 27 enforcement official pursuant to 45 CFR § 164.412.
28 a. A Breach shall be treated as discovered by CONTRACTOR as of the first day on which 29 such Breach is known to CONTRACTOR or, by exercising reasonable diligence, would have been 30 known to CONTRACTOR.
31 b. CONTRACTOR shall be deemed to have knowledge of a Breach, if the Breach is 32 known, or by exercising reasonable diligence would have known, to any person who is an employee, 33 officer, or other agent of CONTRACTOR, as determined by federal common law of agency.
34 2. CONTRACTOR shall provide the notification of the Breach immediately to the COUNTY 35 Privacy Officer. CONTRACTOR’s notification may be oral, but shall be followed by written
BREACH DISCOVERY AND NOTIFICATION. 25 1. Following the discovery of a Breach of Unsecured PHI, CONTRACTOR shall notify
28 a. A Breach shall be treated as discovered by CONTRACTOR as of the first day on which
31 b. CONTRACTOR shall be deemed to have knowledge of a Breach, if the Breach is
34 2. CONTRACTOR shall provide the notification of the Breach immediately to the COUNTY
37 3. CONTRACTOR’s notification shall include, to the extent possible:
1 a. The identification of each Individual whose Unsecured PHI has been, or is reasonably
3 b. Any other information that COUNTY is required to include in the notification to
7 1) A brief description of what happened, including the date of the Breach and the date
9 2) A description of the types of Unsecured PHI that were involved in the Breach (such
12 3) Any steps Individuals should take to protect themselves from potential harm
14 4) A brief description of what CONTRACTOR is doing to investigate the Breach, to
16 5) Contact procedures for Individuals to ask questions or learn additional information,
18 4. COUNTY may require CONTRACTOR to provide notice to the Individual as required in
21 5. In the event that CONTRACTOR is responsible for a Breach of Unsecured PHI in violation
26 6. CONTRACTOR shall maintain documentation of all required notifications of a Breach or
28 7. CONTRACTOR shall provide to COUNTY all specific and pertinent information about the
33 8. CONTRACTOR shall continue to provide all additional pertinent information about the
BREACH DISCOVERY AND NOTIFICATION. 25 1. Following the discovery of a Breach of Unsecured PHI, CONTRACTOR shall notify
28 a. A Breach shall be treated as discovered by CONTRACTOR as of the first day on which
31 b. CONTRACTOR shall be deemed to have knowledge of a Breach, if the Breach is
34 2. CONTRACTOR shall provide the notification of the Breach immediately to the COUNTY
BREACH DISCOVERY AND NOTIFICATION. 11 1. Following the discovery of a Breach of Unsecured PHI, CONTRACTOR shall notify
14 a. A Breach shall be treated as discovered by CONTRACTOR as of the first day on which
17 b. CONTRACTOR shall be deemed to have knowledge of a Breach, if the Breach is
20 2. CONTRACTOR shall provide the notification of the Breach immediately to the COUNTY
23 3. CONTRACTOR’s notification shall include, to the extent possible:
24 a. The identification of each Individual whose Unsecured PHI has been, or is reasonably
26 b. Any other information that COUNTY is required to include in the notification to
30 1) A brief description of what happened, including the date of the Breach and the date
32 2) A description of the types of Unsecured PHI that were involved in the Breach (such
35 3) Any steps Individuals should take to protect themselves from potential harm
37 4) A brief description of what CONTRACTOR is doing to investigate the Breach, to
2 5) Contact procedures for Individuals to ask questions or learn additional information,
4 4. COUNTY may require CONTRACTOR to provide notice to the Individual as required in
BREACH DISCOVERY AND NOTIFICATION. 37 1. Following the discovery of a Breach of Unsecured PHI, CONTRACTOR shall notify 1 COUNTY of such Breach, however both parties agree to a delay in the notification if so advised by a 2 law enforcement official pursuant to 45 CFR § 164.412.
3 a. A Breach shall be treated as discovered by CONTRACTOR as of the first day on which 4 such Breach is known to CONTRACTOR or, by exercising reasonable diligence, would have been 5 known to CONTRACTOR.
6 b. CONTRACTOR shall be deemed to have knowledge of a Breach, if the Breach is 7 known, or by exercising reasonable diligence would have known, to any person who is an employee, 8 officer, or other agent of CONTRACTOR, as determined by federal common law of agency.
9 2. CONTRACTOR shall provide the notification of the Breach immediately to the COUNTY 10 Privacy Officer. CONTRACTOR’s notification may be oral, but shall be followed by written 11 notification within twenty four (24) hours of the oral notification. 12 //
13 a. CONTRACTOR’S notification may be oral, but shall be followed by written 14 notification within 24 hours of the oral notification.
15 3. CONTRACTOR’s notification shall include, to the extent possible:
16 a. The identification of each Individual whose Unsecured PHI has been, or is reasonably 17 believed by CONTRACTOR to have been, accessed, acquired, used, or disclosed during the Breach;
18 b. Any other information that COUNTY is required to include in the notification to 19 Individual under 45 CFR §164.404 (c) at the time CONTRACTOR is required to notify COUNTY or 20 promptly thereafter as this information becomes available, even after the regulatory sixty (60) day 21 period set forth in 45 CFR § 164.410 (b) has elapsed, including:
22 (1) A brief description of what happened, including the date of the Breach and the date 23 of the discovery of the Breach, if known;
