Orange County NC Website
Browse       Search
18 <br /> <br />Participants likely impacted by the Breach. The Notification should include sufficient information <br />for the other Party or other Participants to understand the nature of the Breach. For instance, such <br />Notification could include, to the extent available at the time of the Notification, the following <br />information: <br />a. One or two sentence description of the Breach <br />b. Description of the roles of the people involved in the Breach (e.g. employees, Authorized Users, <br />service providers, unauthorized persons, etc.) <br />c. The type of Message Content Breached <br />d. Participants likely impacted by the Breach <br />e. Number of individuals or records impacted/estimated to be impacted by the Breach <br />f. Actions taken by the Participant to mitigate the Breach <br />g. Current Status of the HIPAA Breach (under investigation or resolved) <br />h. Corrective action taken and steps planned to be taken to prevent a similar Breach. <br />14.02. The Parties shall supplement the information contained in the Notification as it becomes available <br />and cooperate with other Participants in accordance with Section 1(e) of this Agreement. The <br />Notification required by this Section 14 shall not include any PHI. If, on the basis of the Notification, <br />a Participant desires to stop Transacting Message Content with the Participant that reported a Breach, <br />it shall stop Transacting Message Content in accordance with Section 1 of this Agreement. If, on <br />the basis of the Notification, NC HIEA determines that (i) the other Participants that have not been <br />notified of the Breach would benefit from a summary of the Notification or (ii) a summary of the <br />Notification to the other Participants would enhance the security of NC HealthConnex, it may <br />provide, in a timely manner, a summary to such Participants that does not identify any of the <br />Participants or individuals involved in the Breach. <br />14.03. Information provided by a Participant in accordance with this Section, except Message Content, may <br />be “Confidential Participant Information.” Such “Confidential Participant Information” shall be <br />treated in accordance with Section 16. <br />14.04. This Section shall not be deemed to supersede a Participant’s obligations (if any) under relevant <br />security incident, Breach notification or confidentiality provisions of Applicable Law. <br />14.05. Compliance with this Section shall not relieve Participants of any other security incident or Breach <br />reporting requirements under Applicable Law including, but not limited to, those related to <br />consumers. <br />15. Representations and Warranties. <br />15.01. Accurate Participant Information. Except to the extent prohibited by Applicable Law, each <br />Participant has provided, and shall continue to provide, NC HIEA with all information reasonably <br />requested by NC HIEA and needed by NC HIEA to discharge its duties under this Agreement or <br />Applicable Law, including during the Dispute Resolution Process. Any information provided by a <br />Participant to NC HIEA shall be responsive and accurate. Each Participant shall provide Notice to <br />NC HIEA if any information provided by the Participant to NC HIEA materially changes. Each <br />Participant acknowledges that NC HIEA reserves the right to confirm or otherwise verify or check, <br />in its sole discretion, the completeness and accuracy of any information provided by a Participant at <br />any time and each Participant shall reasonably cooperate with NC HIEA in such actions, given <br />reasonable prior notice. This Section 15.01 does not apply to HIE Data. <br />15.02. Execution of the Participation Agreement. Prior to submitting HIE Data to NC HIEA, Transacting <br />Message Content with other Participants, or accessing and using NC HealthConnex Resources, each <br />DocuSign Envelope ID: 47B4445A-C7CA-4D2E-9075-2AFD82F82DEC