Security incidents under the BAA are reported within five business days
Catalog row in Vendor License Rules · Cited
- Kind
- Term
- Statement
- Business Associate Agreement section 4: Glean reports a Security Incident, including unsecured PHI use or disclosure, without undue delay and no later than five business days. (effective 2026-04-09)
- Applies when
- A security incident occurs
- Applies to
- PHI
- Related programs