Unsecured Protected Health Information. “Unsecured Protected Health Information” shall have the same meaning as the term “unsecured protected health information” in 45 CFR § 164.402.
Unsecured Protected Health Information. “Unsecured Protected Health Information” or “Unsecured PHI” shall mean PHI that is not secured through the use of a technology or methodology specified by the Secretary in guidance or as otherwise defined in the §13402(h) of the HITECH Act.
Unsecured Protected Health Information. “Unsecured Protected Health Information” means protected health information that is not rendered unusable, unreadable, or indecipherable to unauthorized persons through the use of a technology or methodology approved by the Secretary.
Unsecured Protected Health Information. “UPHI”). UPHI shall have the same meaning as the term “unsecured protected health information” in 45 CFR 164.402, limited to the information created or received by Business Associate from or on behalf of Covered Entity.
Unsecured Protected Health Information. “Unsecured Protected Health Information” shall have the meaning set forth in the ARRA.
Unsecured Protected Health Information. For all Unsecured PHI maintained or transmitted by BA or BA’s subcontractors, BA shall notify each Individual whose Unsecured PHI has been Accessed, acquired, Used, or Disclosed in a manner not permitted under the HIPAA Privacy Rule which compromises the security and privacy of the PHI, except when law enforcement requires a delay pursuant to 45 CFR § 164.412. If BA cannot identify the specific Individuals whose Unsecured PHI may have been Accessed, BA shall notify all persons whose Unsecured PHI reasonably may have been Accessed. On behalf of FHKC, BA shall notify such Individuals without unreasonable delay, and in no case later than sixty (60) days after discovery of the Breach. The Notice required under HIPAA shall be made as follows: By written Notice in plain language including, to the extent possible: A brief description of what happened, including the date of the Breach and the date of the discovery of the Breach, if known; A description of the types of Unsecured PHI involved in the Breach (including but not limited to items such as whether full name, social security number, date of birth, home address, Family Account number, diagnosis, disability code, or other types of information were involved); Any steps Individuals should take to protect themselves from potential harm resulting from the Breach; A brief description of what BA and FHKC are doing to investigate the Breach, to mitigate the harm to Individuals, and to protect against further Breaches; and Contact procedures for Individuals to ask questions or learn additional information, which shall include a toll-free telephone number, an email address, website or postal address. BA must use a method of notification that meets the requirements of 45 CFR 164.404(d). Further, BA must provide Notice to the media when required under 45 CFR 164.406 and to HHS pursuant to 45 CFR 164.408. BA also agrees to comply with any similar state laws, such as section 501.171, Florida Statutes, that govern breaches. BA agrees to pay all costs of notification and any associated mitigation as a result of a Breach or breach of state law, including the provision of, at a minimum, two years of credit monitoring and identity theft protection for such affected Individuals. FHKC, in its sole discretion, shall determine if the Breach or breach of state law is significant enough to warrant such measures and the length of time such mitigation measures shall be offered to the affected Individuals. In the event of the unpermitt...
Unsecured Protected Health Information. “Unsecured Protected Health Information” shall mean Protected Health Information that is not rendered unusable, unreadable, or indecipherable to unauthorized individuals through the use of a technology or methodology specified by the Secretary in guidance published at 74 Fed. Reg. 19006 (April 27, 2009), and in annual guidance published thereafter. All other capitalized terms used, but not otherwise defined, in this Addendum shall have the same meaning for those terms as set forth in the HIPAA Privacy and Security Rules.
Unsecured Protected Health Information. (8) All non-public budget, expense, payment and other financial information;
Unsecured Protected Health Information. For all Unsecured PHI maintained or transmitted by BA or BA’s subcontractors, BA shall notify each Individual whose Unsecured PHI has been Accessed, acquired, Used, or Disclosed in a manner not permitted under the HIPAA Privacy Rule which compromises the security and privacy of the PHI, except when law enforcement requires a delay pursuant to 45 CFR §
Unsecured Protected Health Information. “Unsecured Protected Health Information” shall have the same meaning as the term “unsecured protected health information” in the HITECH Act, Section 13402(h)(1). Obligations of Covered Entity: If deemed applicable by Covered Entity: Upon request, provide Business Associate with a copy of its Notice of Privacy Practices produced by Covered Entity in accordance with 45 C.F.R. §164.520. Covered Entity will notify Business Associate of any changes to such Notice, and notify Business Associate of any limitation(s) in the Notice of Privacy Practices to the extent that such limitation may affect Business Associate’s use or disclosure of protected health information. Provide Business Associate with any changes in, or revocation of, authorizations by Individuals relating to the use and/or disclosure of PHI, if such changes affect Business Associate’s permitted or required uses and/or disclosures. Notify Business Associate of any restriction on the use or disclosure of protected health information that Covered Entity has agreed to or is required to abide by under 45 CFR 164.522, to the extent that such restriction may affect Business Associate’s use or disclosure of protected health information.
