Reporting of Unauthorized Access. A. Entity shall, within ten (10) calendar days of becoming aware of an unauthorized access to PHI unrelated to treatment of a patient, payment or operations through Epic Link by Entity, its officers, directors, employees, contractors, agents, report any such access to Hospital. Such notice shall be made to the following: ▇▇▇ & ▇▇▇▇▇▇ ▇. ▇▇▇▇▇ Children’s Hospital of Chicago; ATTN: Privacy Officer; ▇▇▇ ▇. ▇▇▇▇▇▇▇ ▇▇▇. Box 160; Chicago, IL 60611; Phone: ▇▇▇.▇▇▇.▇▇▇▇. B. Entity will promptly take actions to mitigate the cause of the unauthorized access. To the extent Hospital deems warranted, in its sole discretion, Hospital will provide notification to its patients (at Entity’s expense). In the event credit monitoring is necessary for affected individuals, it shall be provided at Entity’s sole cost and expense.
Appears in 4 contracts
Sources: Access to Protected Health Information Agreement, Access to Protected Health Information Agreement, Access to Protected Health Information Agreement