2023-098B - Laserfiche WebLink

Home Browse Search

G. Disclosure to Employer Administrator will not disclose any Protected Health Information to Employer, except as permitted by and in accordance with PART 3 below. H. Resorting Non -Permitted Use or Disclosure and Security Incidents 1. Privacy Breach Administrator will report to GHP within ten (10) calendar days any use or disclosure of Protected Health Information of which Administrator becomes aware that is not permitted by this Addendum and that constitutes a Breach of Unsecured PHI. GHP hereby delegates to Administrator (i) the responsibility for determining whether any use or disclosure of Protected Health Information under this Addendum constitutes a Breach of Unsecured PHI, and (ii) the implementation of notification and reporting obligations associated with a Breach of Unsecured PHI in accordance with relevant legal requirements. Administrator will reasonably cooperate with GHP in GHP's performance of investigation or assessments necessary to determine whether a Breach of Unsecured PHI has occurred. 2. Security Incidents Administrator will report to GHP within ten (10) calendar days any incident of which Administrator becomes aware that is (a) a successful unauthorized access, use or disclosure of Electronic Protected Health Information; or (b) a successful major (i) modification or destruction of Electronic Protected Health Information or (ii) interference with system operations in an Information System containing Electronic Protected Health Information. Upon GHP's request, Administrator will report any incident of which Administrator becomes aware that is a successful minor (a) modification or destruction of Electronic Protected Health Information or (b) interference with system operations in an Information System containing Electronic Protected Health Information. I. Duty to Mitigate Administrator will mitigate to the extent reasonably practicable any harmful effect of which Administrator is aware that is caused by any use or disclosure of Protected Health Information in violation of this Addendum. J. Termination of Addendum GHP will have the right to terminate the Agreement and this Addendum if Administrator has engaged in a pattern of activity or practice that constitutes a material breach or violation of Administrator's obligations regarding Protected Health Information under this Addendum and, on notice of such material breach or violation from GHP, fails to take reasonable steps to cure the breach or end the violation. If Administrator fails to cure the material breach or end the violation within 30 days after receipt of GHP's notice, GHP may terminate the Agreement and this Addendum by providing Administrator written notice of termination, stating the uncured material breach or violation that provides the basis for the termination and specifying the effective date of the termination. 43