45 CFR 164.504(e)(2)(ii)(C) requires the business associate to report uses or disclosures not provided for by the contract, including breaches of unsecured PHI as required by 164.410.

Checked 2026-09-24

Vendor
US HHS
Product
HIPAA Privacy Rule
Subsystem
business associate contracts
Deployment
any
Region
us
Release range
current CFR text
Checked
2026-09-24

Sources

Cite this note

APA

WarmTransfer. (2026, September 24). UCaaS and CCaaS procurement and RFP evaluation: source note ucaas-ccaas-procurement-hipaa-ba-breach-report. WarmTransfer. https://warmtransfer.net/knowledge/claims/ucaas-ccaas-procurement-hipaa-ba-breach-report

BibTeX

@misc{warmtransfer-claim-ucaas-ccaas-procurement-hipaa-ba-breach-report,
  title  = {UCaaS and CCaaS procurement and RFP evaluation: source note ucaas-ccaas-procurement-hipaa-ba-breach-report},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/claims/ucaas-ccaas-procurement-hipaa-ba-breach-report},
  note   = {Source note ucaas-ccaas-procurement-hipaa-ba-breach-report, checked 2026-09-24}
}

Read in context