Common use of Notification of Breach Clause in Contracts

Notification of Breach. Unless stricter reporting requirements apply in accordance with federal or state laws or regulations, other provisions of the Contract, or this Exhibit “M”, BA shall notify CE within twenty-four (24) hours of any suspected or actual breach of security, intrusion or unauthorized use or disclosure of PHI of which BA becomes aware and/or any actual or suspected use or disclosure of data in violation of any applicable federal or state laws or regulations. Unless CE provides BA with written notice within 3 (three) business days that it will undertake such obligations on behalf of BA, BA shall take (i) prompt corrective action to cure any such deficiencies and (ii) any action pertaining to such unauthorized disclosure required by applicable federal and state laws and regulations. The parties agree that CE has the sole discretion to determine whether or not it will undertake such obligations on behalf of BA and that, if it does, CE has the right to require BA to pay for any or all costs associated therewith. BA shall provide notice to CE as set forth in paragraph 6.