Common use of Discovery of Breach Clause in Contracts

Discovery of Breach. To notify COUNTY immediately by telephone call plus email or fax upon the discovery of breach of security of PHI in computerized form if the PHI was, or is reasonably believed to have been, acquired by an unauthorized person, or within 24 hours by email or fax of any suspected security incident, intrusion or unauthorized use or disclosure of PHI in violation of this Agreement and this Addendum, or potential loss of confidential data affecting this Agreement. Notification shall be provided to the COUNTY Compliance Officer. If the incident occurs after business hours or on a weekend or holiday and involves electronic PHI, notification shall be provided using the “Privacy Incident Reporting Form” located at the following web address: xxxx://xxx.xxxx.xx.xxx/formsandpubs/laws/priv/Pages/DHCSBusinessAssociate sOnly.aspx Business Associate shall take:

Discovery of Breach. To notify COUNTY immediately by telephone call plus email or fax upon the discovery of breach of security of PHI in computerized form if the PHI was, or is reasonably believed to have been, acquired by an unauthorized person, or within 24 hours by email or fax of any suspected security incident, intrusion or unauthorized use or disclosure of PHI in violation of this Agreement and this Addendum, or potential loss of confidential data affecting this Agreement. Notification shall be provided to the COUNTY Compliance Officer. If the incident occurs after business hours or on a weekend or holiday and involves electronic PHI, notification shall be provided using the “Privacy Incident Reporting Form” located at the following web address: xxxx://xxx.xxxx.xx.xxx/formsandpubs/laws/priv/Pages/DHCSBusinessAssociate sOnly.aspx xxxx://xxx.xxxx.xx.xxx/formsandpubs/laws/priv/Pages/DHCSBusinessAssoci atesOnly.aspx Business Associate shall take:

Discovery of Breach. To notify COUNTY immediately by telephone call plus email or fax upon the discovery of breach of security of PHI in computerized form if the PHI was, or is reasonably believed to have been, acquired by an unauthorized person, or within 24 hours by email or fax of any suspected security incident, intrusion or unauthorized use or disclosure of PHI in violation of this Agreement and this Addendum, or potential loss of confidential data affecting this Agreement. Notification shall be provided to the COUNTY Compliance OfficerManager. If the incident occurs after business hours or on a weekend or holiday and involves electronic PHI, notification shall be provided using the “Privacy Incident Reporting Form” located at the following web address: xxxx://xxx.xxxx.xx.xxx/formsandpubs/laws/priv/Pages/DHCSBusinessAssociate sOnly.aspx xxxx://xxx.xxxx.xx.xxx/formsandpubs/laws/priv/Pages/DHCSBusinessAssoci atesOnly.aspx Business Associate shall take:

Discovery of Breach. To notify COUNTY immediately by telephone call plus email or fax upon the discovery of breach of security of PHI in computerized form if the PHI was, or is reasonably believed to have been, acquired by an unauthorized person, or within 24 twenty-four (24) hours by email or fax of any suspected security incident, intrusion or unauthorized use or disclosure of PHI in violation of this Agreement and this Addendum, or potential loss of confidential data affecting this Agreement. Notification shall be provided to the COUNTY Compliance OfficerManager. If the incident occurs after business hours or on a weekend or holiday and involves electronic PHI, notification shall be provided using the “Privacy Incident Reporting Form” located at the following web address: xxxx://xxx.xxxx.xx.xxx/formsandpubs/laws/priv/Pages/DHCSBusinessAssociate sOnly.aspx xxxxx://xxx.xxxx.xx.xxx/formsandpubs/laws/priv/Documents/Privacy- Incident-Report-PIR.pdf Business Associate shall take:

Discovery of Breach. To notify COUNTY Merced immediately by telephone call plus email or fax upon the discovery of breach of security of PHI in computerized form if the PHI was, or is reasonably believed to have been, acquired by an unauthorized person, or within 24 hours by email or fax of any suspected security incident, intrusion or unauthorized use or disclosure of PHI in violation of this Agreement and this Addendum, or potential loss of confidential data affecting this Agreement. Notification shall be provided to the COUNTY Merced Compliance OfficerManager. If the incident occurs after business hours or on a weekend or holiday and involves electronic PHI, notification shall be provided using the “Privacy Incident Reporting Form” located at the following web address: xxxx://xxx.xxxx.xx.xxx/formsandpubs/laws/priv/Pages/DHCSBusinessAssociate sOnly.aspx xxxxx://xxx.xxxx.xx.xxx/formsandpubs/laws/priv/Documents/Privacy- Incident-Report-PIR.pdf Business Associate shall take: