Reporting and Auditing. 1. UMHS will perform regular audits of access of UMHS EHI. User shall notify UMHS promptly upon discovery of any inappropriate access, use or disclosure of EHI or of any Security Incident involving EHI, as defined in 45 C.F.R. 164.304. 2. User will cooperate with UMHS in its continuing verification of User’s compliance and compliance of its personnel with the terms of this Agreement, including cooperation with routine and targeted audits conducted by UMHS, review of regular User activity audit reports provided by UMHS, and preparation and submission to UMHS of written justification for outlier User activity. In the event of an investigation related to User or User’s Workforce access to UMHS EHI, User shall fully cooperate with UMHS in such investigation. 3. User shall maintain logs of all accountable disclosures, as defined in 45 C.F.R. 164.528, and provide such logs to UMHS annually or upon request.
Appears in 2 contracts
Sources: Umhs Electronic Health Information Access Agreement, Umhs Electronic Health Information Access Agreement
Reporting and Auditing. 1. UMHS will perform regular audits of access of UMHS EHI. User Organization shall notify UMHS promptly upon discovery of any inappropriate access, use or disclosure of EHI or of any Security Incident involving EHI, as defined in 45 C.F.R. 164.304.
2. User Organization will cooperate with UMHS in its continuing verification of UserOrganization’s compliance and compliance of its personnel with the terms of this Agreement, including cooperation with routine and targeted audits conducted by UMHS, review of regular User Organization activity audit reports provided by UMHS, and preparation and submission to UMHS of written justification for outlier User Organization activity. In the event of an investigation related to User Organization or UserOrganization’s Workforce access to UMHS EHI, User Organization shall fully cooperate with UMHS in such investigation.
3. User Organization shall maintain logs of all accountable disclosures, as defined in 45 C.F.R. 164.528, and provide such logs to UMHS annually or upon request.
Appears in 1 contract