Common use of Reporting of Unauthorized Use or Disclosure of PHI Clause in Contracts

Reporting of Unauthorized Use or Disclosure of PHI. Participant shall report to HSHS: (1) any use or disclosure of PHI not authorized by this Agreement; (2) any security incident of which it becomes aware; or (3) any allegation from any patient or other individual that a User has made an unauthorized use or disclosure of PHI or breached security of PHI. Participant shall make the report to HSHS’s Privacy Officer immediately if there are foreseeable patient care consequences, and in any event not more than one (1) business day after Participant confirms such use, disclosure, security incident or allegation. Participant’s report shall identify: (i) the nature of the unauthorized use or disclosure, security incident orallegation;

Reporting of Unauthorized Use or Disclosure of PHI. Participant shall report to HSHS: (1) any use or disclosure of PHI not authorized by this Agreement; (2) any security incident of which it becomes aware; or (3) any allegation from any patient or other individual that a User has made an unauthorized use or disclosure of PHI or breached security of PHI. Participant shall make the report to HSHS’s Privacy Officer immediately if there are foreseeable patient care consequences, and in any event not more than one (1) business day after Participant confirms such use, disclosure, security incident or allegation. Participant’s report shall identify: (i) the nature of the unauthorized use or disclosure, security incident orallegationor allegation; (ii) the PHI at issue; (iii) names of workforce involved in the unauthorized use, disclosure, security incident or allegation and the recipient of any unauthorized disclosure;