Common use of Reporting of Breach Clause in Contracts

Reporting of Breach. Brightree shall report to Client any Security Incident, Breach of Unsecured Protected Health Information, or any other use or disclosure of Protected Health Information other than as provided for by the Agreement, including this Addendum, within five (5) business days of learning of such use or disclosure. Notifications related to the breach of Unsecured Protected Health Information shall be in writing and shall include: (i) the identification of each individual whose Unsecured Protected Health Information was or is reasonably believed by Brightree to have been accessed, acquired, used or disclosed during the Breach; and (ii) any other available information that Client is required to include in notification to the individual under 45 CFR 164.404(c), such as a brief description of the incident and the nature of the information disclosed, and the status of Brightree’s investigation of the matter and mitigation efforts. Brightree shall take prompt corrective action to cure any deficiencies in its systems as required by applicable federal and state laws and regulations.

Reporting of Breach. Brightree shall report to Client Licensee any Security Incident, Breach of Unsecured Protected Health Information, or any other use or disclosure of Protected Health Information other than as provided for by the Agreement, including this Addendum, within five (5) business days of learning of such use or disclosure. Notifications related to the breach of Unsecured Protected Health Information shall be in writing and shall include: (i) the identification of each individual whose Unsecured Protected Health Information was or is reasonably believed by Brightree to have been accessed, acquired, used or disclosed during the Breach; and (ii) any other available information that Client Licensee is required to include in notification to the individual under 45 CFR 164.404(c), such as a brief description of the incident and the nature of the information disclosed, and the status of Brightree’s investigation of the matter and mitigation efforts. Brightree shall take prompt corrective action to cure any deficiencies in its systems as required by applicable federal and state laws and regulations.