Common use of Reporting of Unauthorized Use or Disclosure of PHI Clause in Contracts

Reporting of Unauthorized Use or Disclosure of PHI. COUNTY shall notify MEMBER by telephone call and email upon the discovery of, and no later than five (5) business days after the discovery of, a breach of unsecured County PHI in electronic media or in any other media if County PHI was, or is reasonably believed to have been, accessed or acquired by an unauthorized person, or upon the discovery of a suspected security incident that involves data provided to County by OCHIN. All such notices shall be made by phone or email using the contact information contained in Section 21 below.