2021-089C - Laserfiche WebLink

Home Browse Search

DocuSign Envelope ID: FAA4141C-02DF-41B5-A6D3-14CDB4ABD65B (A) Identify the nature of the Breach, which will include a brief description of what happened, including the date of any Breach and the date of the discovery of any Breach; (B) Identify the types of Protected Health Information that were involved in the Breach (such as whether full name, Social Security number, date of birth, home address, account number, diagnosis, or other information were involved); (C) Identify who made the non -permitted use or disclosure and who received the non- permitted disclosure; (D) Identify what corrective or investigational action Business Associate took or will take to prevent further non -permitted uses or disclosures, to mitigate harmful effects, and to protect against any further Breaches; (E) Identify what steps the individuals who were subject to a Breach should take to protect themselves; (F) Provide such other information, including a written report and risk assessment under 45 CFR § 164.402, as Covered Entity may reasonably request. (iii) Security Incidents. Business Associate will report to Covered Entity any Security Incident of which Business Associate becomes aware. Business Associate will make this report once per month, except if any such Security Incident resulted in a disclosure not permitted by this Agreement or Breach of Unsecured Protected Health Information, Business Associate will make the report in accordance with the provisions set forth above. b. Mitigation. Business Associate shall mitigate, to the extent practicable, any harmful effect known to the Business Associate resulting from a use or disclosure in violation of this Agreement. 6. Term and Termination. a. Term. This Agreement shall be effective as the Effective Date, and shall remain in effect until the Service Agreement terminates. b. Right to Terminate for Cause. Notwithstanding "a" above, Covered Entity may terminate this Agreement if it determines, in its sole discretion, that Business Associate has breached any provision of this Agreement, and after written notice to Business Associate of the breach, Business Associate has failed to cure the breach within thirty calendar days after receipt of the notice. Any such termination will be effective immediately or at such other date specified in Covered Entity's notice of termination. c. Treatment of Protected Health Information on Termination. (i) Return or Destruction of Covered Entity's Protected Health Information Is Feasible. Upon termination of this Agreement, Business Associate will, if feasible, return to Covered Entity or destroy