Documenting and Reporting Breaches Sample Clauses

POPULAR SAMPLE Copied 1 times
Documenting and Reporting Breaches. 6.1 Business Associate shall report to Covered Entity any Breach of Unsecured PHI, including Breaches reported to it by a Subcontractor, as soon as it (or any of its employees or agents) becomes aware of any such Breach, and in no case later than two (2) business days after it (or any of its employees or agents) becomes aware of the Breach, except when a law enforcement official determines that a notification would impede a criminal investigation or cause damage to national security. 6.2 Business Associate shall provide Covered Entity with the names of the individuals whose Unsecured PHI has been, or is reasonably believed to have been, the subject of the Breach and any other available information that is required to be given to the affected individuals, as set forth in 45 CFR § 164.404(c), and, if requested by Covered Entity, information necessary for Covered Entity to investigate the impermissible use or disclosure. Business Associate shall continue to provide to Covered Entity information concerning the Breach as it becomes available to it. Business Associate shall require its Subcontractor(s) to agree to these same terms and conditions. 6.3 When Business Associate determines that an impermissible acquisition, use or disclosure of PHI by a member of its workforce is not a Breach, as that term is defined in 45 CFR § 164.402, and therefore does not necessitate notice to the impacted individual(s), it shall document its assessment of risk, conducted as set forth in 45 CFR § 402(2). When requested by Covered Entity, Business Associate shall make its risk assessments available to Covered Entity. It shall also provide Covered Entity with 1) the name of the person(s) making the assessment, 2) a brief summary of the facts, and 3) a brief statement of the reasons supporting the determination of low probability that the PHI had been compromised. When a breach is the responsibility of a member of its Subcontractor’s workforce, Business Associate shall either 1) conduct its own risk assessment and draft a summary of the event and assessment or 2) require its Subcontractor to conduct the assessment and draft a summary of the event. In either case, Business Associate shall make these assessments and reports available to Covered Entity. 6.4 Business Associate shall require, by contract, a Subcontractor to report to Business Associate and Covered Entity any Breach of which the Subcontractor becomes aware, no later than two (2) business days after becomes aware of the B...
View SourceView Similar (203)
Documenting and Reporting Breaches. Business Partner shall report to DVHA any Breach of PII as soon as it (or any of its employees or agents) becomes aware of such Breach, and in no case later than one (1) hour after it (or any of its employees or agents) become aware of the Breach. If DVHA determines that a Breach of PII occurred for which one of Business Partner’s employees or agents was responsible, upon its request, Business Partner shall provide notice to the individual(s) whose PII was the subject of the Breach. When requested to provide notice, Business Partner shall consult with DVHA about the timeliness, content and method of notice, and shall receive DVHA’s approval concerning these elements. The cost of notice and related remedies shall be borne by Business Partner. Business Partner shall also be responsible for any reporting as required by 9 V.S.A. § 2435.
View SourceView Similar (27)
Documenting and Reporting Breaches. 5.1 Business Associate shall report to Covered Entity any Breach of Unsecured PHI as soon as it (or any of its employees or agents) become aware of any such Breach, and in no case later than three (3) business days after it (or any of its employees or agents) becomes aware of the Breach, except when a law enforcement official determines that a notification would impede a criminal investigation or cause damage to national security. 5.2 Business Associate shall provide Covered Entity with the names of the individuals whose Unsecured PHI has been, or is reasonably believed to have been, the subject of the Breach and any other available information that is required to be given to the affected individuals, as set forth in 45 CFR §164.404(c), and, if requested by Covered Entity, information necessary for Covered Entity to investigate the impermissible use or disclosure. Business Associate shall continue to provide to Covered Entity information concerning the Breach as it becomes available to it. 5.3 When Business Associate determines that an impermissible acquisition, use or disclosure of PHI by a member of its workforce does not pose a significant risk of harm to the affected individuals, it shall document its assessment of risk. Such assessment shall include: 1) the name of the person(s) making the assessment, 2) a brief summary of the facts, and 3) a brief statement of the reasons supporting the determination of low risk of harm. When requested by Covered Entity, Business Associate shall make its risk assessments available to Covered Entity.
View SourceView Similar (22)
Documenting and Reporting Breaches. 6.1 Business Associate shall report to Covered Entity any Breach of Unsecured PHI, including Breaches reported to it by a Subcontractor, as soon as it (or any of its employees or agents) becomes aware of any such Breach, and in no case later than two
View SourceView Similar (21)
Documenting and Reporting Breaches. Business Partner shall report to DVHA any Breach of PII by Business Partner as soon as it (or any of its employees or agents) becomes aware of such Breach, and in no case later than one (1) hour after it (or any of its employees or agents) become aware of the Breach. If DVHA determines that a Breach of PII occurred for which one of Business Partner’s employees or agents was responsible, upon its request, Business Partner shall, provide notice to the individual(s) whose PII was the subject of the Breach. When requested to provide notice, Business Partner shall consult with DVHA about the timeliness, content and method of notice, and shall receive DVHA’s approval concerning these elements, such approval not to be unreasonably withheld, conditioned, or delayed. The cost of notice and related remedies shall be borne by Business Partner. Business Partner shall also be responsible for any reporting as required by 9 V.S.A. § 2435.
View Source

Related to Documenting and Reporting Breaches

  • Accounting and Reporting I. The Agent shall establish separate accounts for the trust assets, the assets obtained as a result of managing and utilizing the trust assets, its own assets, and other trust assets. II. The Agent shall prepare and send monthly an comprehensive statement in writing, via email or text message to the Principal. The comprehensive statement will provide to the Principle in accordance with the law, agreement or on a basis of risk management. The content states the Pinciple’s business dealing with the Agent, including deposits, loans(foreign currency loans、overdue receivables、bad debts and credit card debt excluded), non-discretionary monetary trust, insurance and other business information or activities related to financial products(charitable trusts, individual or corporate trusts, SWIFT, financial, credit card and securities business statements excluded). The Agent may engage a third party to prepare and send comprehensive statements according to the law. The Principal shall check the content upon receiving the comprehensive statement.The Principal understands and agrees that, when constitutions of the transaction and/or trust, completion of changes of conditions and/or other agreements, and/or proportional changes of investment gains and losses, the Agent may send the comprehensive statement and/or text message, email and/or related transaction information to the Principal for his/her understanding using latest contact information retained by the Agent when the Principal applies for any business (including, but not limited to, deposits or credit cards).The Agent will not provide comprehensive statements to the Principle, once private banking department reach the agreement with the Principle to provide exclusive statements. III. When authorized to invest in offshore structured notes, the Agent shall prepare and send a written or electronic transaction confirmation notifications within three business days from the day a subscription, redemption, conversion, or early redemption confirmation notification is received from the issuer or the general agent (excluding distribution of dividends and bonuses) to the Principal. Additionally, the Agent shall prepare and send monthly a written or electronic statement or another document disclosing the most recent reference price to the Principal for his/her reference. IV. If the Principal’s comprehensive statement, transaction notice and transaction confirmation are rejected or returned after being mailed/sent to the address/number specified in the Agreement or the last known address/number of the Principal shall be handled according to the following principles: (I) If the Principal does not make any new transactions before the closing date of the current comprehensive statement, the Agent may send a return notification in a way agreed upon between the Agent and the Principal from the date the mail/text message is rejected or returned to the date the Principal changes the mailing address, e-mail address、phone number in accordance with the Agent's regulations.If the method of sending the comprehensive statement is paper ,the paper comprehensive statement will be stopped and a text message of return notification will be sent when the comprehensive statement should be sent in the next period; If the method of sending the comprehensive statement is e-mail or text message, the electronic comprehensive statement will continue to be sent and a text message or e-mail of return notification will be sent when the comprehensive statement should be sent in the next period.However, when the Principal requests that the Agent resend the comprehensive statement, the Agent may provide the statement to the Principal using a feasible method at the time, and the Principal must change the mailing address, e-mail address or phone number according to the Agent's regulations. (II) If the Principal’s comprehensive statement, transaction notice and transaction confirmation are rejected or returned, the Principal understands and agrees that the Agent may notify the Principal in accordance with the Article 10 aforementioned and implement transaction monitoring measures to protect the Principal's rights in accordance with the Agent’s regulations.

  • Accounting and Reports (a) The Company shall adopt for tax accounting purposes any accounting method that the Board shall decide in its sole discretion is in the best interests of the Company. The Company’s accounts shall be maintained in U.S. currency. (b) After the end of each Taxable Year, the Company shall furnish to each Member such information regarding the operation of the Company and such Member’s Interest as is necessary for Members to complete U.S. federal and state income tax or information returns and any other tax information required by U.S. federal and state law. (c) Except as otherwise required by the 1940 Act, or as may otherwise be permitted by rule, regulation or order, within 60 days after the close of the period for which a report required under this Section 7.1 is being made, the Company shall furnish to each Member an unaudited semi-annual report and an audited annual report containing the information required by such Act. The Company shall cause financial statements contained in each annual report furnished hereunder to be accompanied by a certificate of independent public accountants based upon an audit performed in accordance with generally accepted accounting principles. The Company may furnish to each Member such other periodic reports as it deems necessary or appropriate in its discretion.

  • Monitoring and Reporting The Programme Operator shall monitor, record and report on progress towards the programme’s outcomes in accordance with the provisions contained in the legal framework. The Programme Operator shall ensure that suitable and sufficient monitoring and reporting arrangements are made with the project promoters in order to enable the Programme Operator and the NFP to meet its obligations to the donors. When reporting on progress achieved in Annual and Final Programme Reports, the Programme Operator shall disaggregate results achieved as appropriate and in accordance with instructions and templates received from the FMO.

  • Security Breach Notice and Reporting The Contractor shall have policies and procedures in place for the effective management of Security Breaches, as defined below, which shall be made available to the State upon request.

  • Safeguards Monitoring and Reporting The Borrower shall do the following or cause the Project Executing Agency to do the following: