BREACH DISCOVERY AND NOTIFICATION 17 1. Following the discovery of a Breach of Unsecured PHI, CONTRACTOR shall notify 18 COUNTY of such Breach, however both parties agree to a delay in the notification if so advised by a 19 law enforcement official pursuant to 45 CFR § 164.412.
20 a. A Breach shall be treated as discovered by CONTRACTOR as of the first day on which 21 such Breach is known to CONTRACTOR or, by exercising reasonable diligence, would have been 22 known to CONTRACTOR.
23 b. CONTRACTOR shall be deemed to have knowledge of a Breach, if the Breach is 24 known, or by exercising reasonable diligence would have known, to any person who is an employee, 25 officer, or other agent of CONTRACTOR, as determined by federal common law of agency.
26 2. CONTRACTOR shall provide the notification of the Breach immediately to the COUNTY 27 Privacy Officer. CONTRACTOR’s notification may be oral, but shall be followed by written 28 notification within twenty four (24) hours of the oral notification.
29 3. CONTRACTOR’s notification shall include, to the extent possible:
30 a. The identification of each Individual whose Unsecured PHI has been, or is reasonably 31 believed by CONTRACTOR to have been, accessed, acquired, used, or disclosed during the Breach;
32 b. Any other information that COUNTY is required to include in the notification to 33 Individual under 45 CFR §164.404 (c) at the time CONTRACTOR is required to notify COUNTY or 34 promptly thereafter as this information becomes available, even after the regulatory sixty (60) day 35 period set forth in 45 CFR § 164.410 (b) has elapsed, including:
36 1) A brief description of what happened, including the date of the Breach and the date 37 of the discovery of the Breach, if known;
1 2) A description of the types of Unsecured PHI that were involved in the Breach (such 2 as whether full name, social security number, date of birth, home address, account number, diagnosis, 3 disability code, or other types of information were involved);
4 3) Any steps Individuals should take to protect themselves from potential harm 5 resulting from the Breach;
6 4) A brief description of what CONTRACTOR is doing to investigate the Breach, to 7 mitigate harm to Individuals, and to protect against any future Breaches; and
8 5) Contact procedures for Individuals to ask questions or learn additional information, 9 which shall include a toll-free telephone number, an e-mail address, Web site, or postal address.
10 4. COUNTY may require CONTRACTOR to provide notice to the Individual as required in 11 45 CFR § 164.404, if it is reasonable to do so under the circumstances, at the sole discretion of the 12 COUNTY.
13 5. In the event that CONTRACTOR is responsible for a Breach of Unsecured PHI in violation 14 of the HIPAA Privacy Rule, CONTRACTOR shall have the burden of demonstrating that 15 CONTRACTOR made all notifications to COUNTY consistent with this Subparagraph F and as 16 required by the Breach notification regulations, or, in the alternative, that the acquisition, access, use, or 17 disclosure of PHI did not constitute a Breach.
18 6. CONTRACTOR shall maintain documentation of all required notifications of a Breach or 19 its risk assessment under 45 CFR § 164.402 to demonstrate that a Breach did not occur.
20 7. CONTRACTOR shall provide to COUNTY all specific and pertinent information about the 21 Breach, including the information listed in Section E.3.b.(1)-(5) above, if not yet provided, to permit 22 COUNTY to meet its notification obligations under Subpart D of 45 CFR Part 164 as soon as 23 practicable, but in no event later than fifteen (15) calendar days after CONTRACTOR’s initial report of 24 the Breach to COUNTY pursuant to Subparagraph F.2. above.
25 8. CONTRACTOR shall continue to provide all additional pertinent information about the
Duty to report Force Majeure Event 21.5.1 Upon occurrence of a Force Majeure Event, the Affected Party shall by notice report such occurrence to the other Party forthwith. Any notice pursuant hereto shall include full particulars of:
(a) the nature and extent of each Force Majeure Event which is the subject of any claim for relief under this Article 21 with evidence in support thereof;
(b) the estimated duration and the effect or probable effect which such Force Majeure Event is having or will have on the Affected Party’s performance of its obligations under this Agreement;
(c) the measures which the Affected Party is taking or proposes to take for alleviating the impact of such Force Majeure Event; and
(d) any other information relevant to the Affected Party’s claim.
21.5.2 The Affected Party shall not be entitled to any relief for or in respect of a Force Majeure Event unless it shall have notified the other Party of the occurrence of the Force Majeure Event as soon as reasonably practicable, and in any event no later than 10 (ten) days after the Affected Party knew, or ought reasonably to have known, of its occurrence, and shall have given particulars of the probable material effect that the Force Majeure Event is likely to have on the performance of its obligations under this Agreement.
21.5.3 For so long as the Affected Party continues to claim to be materially affected by such Force Majeure Event, it shall provide the other Party with regular (and not less than weekly) reports containing information as required by Clause 21.5.1, and such other information as the other Party may reasonably request the Affected Party to provide.
Notification of Breach / Compliance Reports The Adviser shall notify the Trust’s CCO promptly upon detection of: (i) any material failure to manage any Fund in accordance with its investment objectives and policies or any applicable law; or (ii) any material breach of any of each Fund’s or the Adviser’s policies, guidelines or procedures with respect to the Fund. In addition, the Adviser shall respond to quarterly requests for information concerning the Fund’s compliance with its investment objectives and policies, applicable law, including, but not limited to the 1940 Act and Subchapter M of the Code, and the Fund’s policies, guidelines or procedures as applicable to the Adviser’s obligations under this Agreement. The Adviser agrees to correct any such failure promptly and to take any action that the Board may reasonably request in connection with any such breach. Upon request, the Adviser shall also provide the officers of the Trust with supporting certifications in connection with such certifications of Fund financial statements and disclosure controls pursuant to the S▇▇▇▇▇▇▇-▇▇▇▇▇ Act. The Adviser will promptly notify the Trust in the event: (x) the Adviser is served or otherwise receives notice of any action, suit, proceeding, inquiry or investigation, at law or in equity, before or by any court, public board, or body, involving the affairs of the Trust (excluding class action suits in which a Fund is a member of the plaintiff class by reason of the Fund’s ownership of shares in the defendant) or the compliance by the Adviser with the federal or state securities laws; or (y) of an actual change in control of the Adviser resulting in an “assignment” (as defined in Section 15) that has occurred or is otherwise proposed to occur.
Stipulated Penalties for Failure to Comply with Certain Obligations As a contractual remedy, Extendicare and OIG hereby agree that failure to comply with certain obligations as set forth in this CIA may lead to the imposition of the following monetary penalties (hereinafter referred to as “Stipulated Penalties”) in accordance with the following provisions.
1. A Stipulated Penalty of $2,500 (which shall begin to accrue on the day after the date the obligation became due) for each day Extendicare fails to establish and effectively implement any of the following obligations as described in Section III:
a. a Compliance Officer;
b. a Compliance Committee;
Indemnification Procedure for Third Party Claims (a) In the event that any party (the “Indemnified Person”) desires to make a claim against any other party (the “Indemnifying Person”) in connection with any Losses for which the Indemnified Person may seek indemnification hereunder in respect of a claim or demand made by any Person not a party to this Agreement against the Indemnified Person (a “Third-Party Claim”), such Indemnified Person must notify the Indemnifying Person in writing, of the Third-Party Claim (a “Third-Party Claim Notice”) as promptly as reasonably possible after receipt, but in no event later than fifteen (15) calendar days after receipt, by such Indemnified Person of notice of the Third-Party Claim; provided, that failure to give a Third-Party Claim Notice on a timely basis shall not affect the indemnification provided hereunder except to the extent the Indemnifying Person shall have been actually and materially prejudiced as a result of such failure. Upon receipt of the Third-Party Claim Notice from the Indemnified Person, the Indemnifying Person shall be entitled, at the Indemnifying Person’s election, to assume or participate in the defense of any Third-Party Claim at the cost of Indemnifying Person. In any case in which the Indemnifying Person assumes the defense of the Third-Party Claim, the Indemnifying Person shall give the Indemnified Person ten (10) calendar days’ notice prior to executing any settlement agreement and the Indemnified Person shall have the right to approve or reject the settlement and related expenses; provided, however, that upon rejection of any settlement and related expenses, the Indemnified Person shall assume control of the defense of such Third-Party Claim and the liability of the Indemnifying Person with respect to such Third-Party Claim shall be limited to the amount or the monetary equivalent of the rejected settlement and related expenses.
(b) The Indemnified Person shall retain the right to employ its own counsel and to discuss matters with the Indemnifying Person related to the defense of any Third-Party Claim, the defense of which has been assumed by the Indemnifying Person pursuant to Section 10.3(a) of this Agreement, but the Indemnified Person shall bear and shall be solely responsible for its own costs and expenses in connection with such participation; provided, however, that, subject to Section 10.3(a) above, all decisions of the Indemnifying Person shall be final and the Indemnified Person shall cooperate with the Indemnifying Person in all respects in the defense of the Third-Party Claim, including refraining from taking any position adverse to the Indemnifying Person.
(c) If the Indemnifying Person fails to give notice of the assumption of the defense of any Third-Party Claim within a reasonable time period not to exceed forty-five (45) days after receipt of the Third-Party Claim Notice from the Indemnified Person, the Indemnifying Person shall no longer be entitled to assume (but shall continue to be entitled to participate in) such defense. The Indemnified Person may, at its option, continue to defend such Third-Party Claim and, in such event, the Indemnifying Person shall indemnify the Indemnified Person for all reasonable fees and expenses in connection therewith (provided it is a Third-Party Claim for which the Indemnifying Person is otherwise obligated to provide indemnification hereunder). The Indemnifying Person shall be entitled to participate at its own expense and with its own counsel in the defense of any Third-Party Claim the defense of which it does not assume. Prior to effectuating any settlement of such Third-Party Claim, the Indemnified Person shall furnish the Indemnifying Person with written notice of any proposed settlement in sufficient time to allow the Indemnifying Person to act thereon. Within fifteen (15) days after the giving of such notice, the Indemnified Person shall be permitted to effect such settlement unless the Indemnifying Person (a) reimburses the Indemnified Person in accordance with the terms of this Article 10 for all reasonable fees and expenses incurred by the Indemnified Person in connection with such Claim; (b) assumes the defense of such Third-Party Claim; and (c) takes such other actions as the Indemnified Person may reasonably request as assurance of the Indemnifying Person’s ability to fulfill its obligations under this Article 10 in connection with such Third-Party Claim.