Notification by Business Associate. following the Discovery of a Breach of PHI a. Business Associate shall notify the Covered Entity in writing following the discovery of a breach of PHI or EPHI. A breach shall be treated as discovered by a Business Associate as of the first day of which such breach is known to the Business Associate or, by exercising reasonable diligence, would have been known to the Business Associate. A Business Associate shall be deemed to have knowledge of a breach if the breach is known, or by exercising reasonable diligence would have been known, to any person, other than the person committing the breach, who is an employee, officer, or other agent of the Business Associate. b. Except as provided in 45 C.F. R. § 164.412, the Business Associate shall provide the notification of breach without unreasonable delay and in no case later than 60 calendar days after discovery of a breach. c. The written notification of a breach shall include and provide the identification of each individual whose PHI or EPHI has been, or is reasonably believed by the Business Associate to have been accessed, acquired, used, or disclosed during the breach. d. The Business Associate shall provide the Covered Entity with any other available information that the Covered Entity is required to include in notification to the individual affected by the breach under 45 C.F. R. § 164.404(c) at the time the notification is required or promptly thereafter as the information becomes available.
Appears in 5 contracts
Sources: Professional Services, Professional Services, Professional Services
Notification by Business Associate. following the Discovery of a Breach of PHI
a. Business Associate shall notify the Covered Entity in writing following the discovery of a breach of PHI or EPHI. A breach shall be treated as discovered by a Business Associate as of the first day of on which such breach is known know to the Business Associate or, by exercising reasonable diligence, would have been known to the Business Associate. A Business Associate shall be deemed to have knowledge of a breach if the breach is known, or by exercising reasonable diligence would have been known, to any person, other than the person committing the breach, who is an employee, officer, or other agent of the Business Associate.
b. Except as provided in 45 C.F. R. § C.F.R. '164.412, the Business Associate shall provide the notification of breach without unreasonable delay and in no case later than 60 calendar days after discovery of a breach.
c. The written notification of a breach shall include and provide the identification of each individual whose PHI or EPHI has been, or is reasonably believed by the Business Associate to have been been, accessed, acquired, used, or disclosed during the breach.
d. The Business Associate shall provide the Covered Entity with any other available information that the Covered Entity is required to include in notification to the individual affected by the breach under 45 C.F. R. § C.F.R. 164.404(c) at the time the notification is required or promptly thereafter as the information becomes available.
Appears in 2 contracts
Sources: Professional Services, Mental Health Services Agreement
Notification by Business Associate. following the Discovery of a Breach of PHI
a. Business Associate shall notify the Covered Entity in writing following the discovery of a breach of PHI or EPHI. A breach shall be treated as discovered by a Business Associate as of the first day of on which such breach is known to the Business Associate or, by exercising reasonable diligence, would have been known to the Business Associate. A Business Associate shall be deemed to have knowledge of a breach if the breach is known, or by exercising reasonable diligence would have been known, to any person, other than the person committing the breach, who is an employee, officer, or other agent of the Business Associate.
b. Except as provided in 45 C.F. R. § C.F.R. '164.412, the Business Associate shall provide the notification of breach without unreasonable delay and in no case later than 60 calendar days after discovery of a breach.
c. The written notification of a breach shall include and provide the identification of each individual whose PHI or EPHI has been, or is reasonably believed by the Business Associate to have been been, accessed, acquired, used, or disclosed during the breach.
d. The Business Associate shall provide the Covered Entity with any other available information that the Covered Entity is required to include in notification to the individual affected by the breach under 45 C.F. R. § C.F.R. 164.404(c) at the time the notification is required or promptly thereafter as the information becomes available.
Appears in 2 contracts
Sources: Professional Services Agreement, Mental Health Services Agreement
Notification by Business Associate. following the Discovery of a Breach of PHI
a. Business Associate shall notify the Covered Entity in writing following the discovery of a breach of PHI or EPHI. A breach shall be treated as discovered by a Business Associate as of the first day of on which such breach is known to the Business Associate or, by exercising reasonable diligence, would have been known to the Business Associate. A Business Associate shall be deemed to have knowledge of a breach if the breach is known, or by exercising reasonable diligence would have been known, to any person, other than the person committing the breach, who is an employee, officer, or other agent of the Business Associate.
b. Except as provided in 45 C.F. R. § C.F.R. '164.412, the Business Associate shall provide the notification of breach without unreasonable delay and in no case later than 60 calendar days after discovery of a breach.
c. The written notification of a breach shall include and provide the identification of each individual everyone whose PHI or EPHI has been, been or is reasonably believed by the Business Associate to have been been, accessed, acquired, used, or disclosed during the breach.
d. The Business Associate shall provide the Covered Entity with any other available information that the Covered Entity is required to include in notification to the individual affected by the breach under 45 C.F. R. § C.F.R. 164.404(c) at the time the notification is required or promptly thereafter as the information becomes available.
Appears in 1 contract
Sources: Professional Services
Notification by Business Associate. following the Discovery of a Breach of PHI
a. Business Associate shall notify the Covered Entity in writing following the discovery of a breach of PHI or EPHI. A breach shall be treated as discovered by a Business Associate as of the first day of on which such breach is known know to the Business Associate or, by exercising reasonable diligence, would have been known to the Business Associate. A Business Associate shall be deemed to have knowledge of a breach if the breach is known, or by exercising reasonable diligence would have been known, to any person, other than the person committing the breach, who is an employee, officer, or other agent of the Business Associate.
b. Except as provided in 45 C.F. R. § C.F.R. '164.412, the Business Associate shall provide the notification of breach without unreasonable delay and in no case later than 60 calendar days after discovery of a breach.
c. The written notification of a breach shall include and provide the identification of each individual whose PHI or EPHI has been, or is reasonably believed by the Business Associate to have been been, accessed, acquired, used, or disclosed during the breach.
d. The Business Associate shall provide the Covered Entity with any other available information that the Covered Entity is required to include in notification to the individual affected by the breach under 45 C.F. R. § 164.404(cC.F.R. 164.404( c) at the time the notification is required or promptly thereafter as the information becomes available.
Appears in 1 contract
Sources: Professional Services