Common use of Reporting of Unauthorized Use or Disclosure of PHI Clause in Contracts

Reporting of Unauthorized Use or Disclosure of PHI. A. Outside Practice shall, within one (1) working day of becoming aware of an unauthorized use or disclosure of PHI by Outside Practice, its officers, directors, employees, contractors, agents or by a third party to which Outside Practice disclosed PHI, report any such disclosure to HMH. Such notice shall be made to the following: B. Potential Data Security Breach C. HMH has the right, at Outside Practice’s sole cost and expense, at any time, to monitor, audit, and review activities and methods in implementing this Agreement in order to assure compliance therewith, within the limits of Outside Practice’s technical capabilities.