Common use of Reporting of Security Incidents Clause in Contracts

Reporting of Security Incidents. Business Associate agrees to report to Covered Entity any successful Security Incident affecting PHI in the possession of Business Associate of which it becomes aware. Such report shall be made as soon as possible, but in no event later than ten (10) business days following the date that the Business Associate becomes aware of such successful Security Incident. Business Associate shall report any Security Incident that is attempted but not successful of which it becomes aware only upon receipt of a written request from Covered Entity.