What information must Brightstar Care include in a report of Breach to the Covered Entity?
Brightstar_Care Franchise · 2025 FDDAnswer from 2025 FDD Document
- 4.9 Reporting of Violations and Security Incidents. Business Associate will promptly report to Covered Entity any impermissible use or disclosure under Privacy Laws of which it becomes aware that Compromises the security or privacy of the PHI ("Breach"). Business Associate will include in the report of Breach the following information if known or can be reasonably obtained:
- (a) Contact information for individuals who may be impacted by the Breach;
- (b) The date of Breach and a brief description of the circumstances surrounding the breach;
- (c) A description of the type of information involved; and
- (d) What Business Associate is doing to investigate the Breach and mitigate harm to individuals.
Source: Item 22 — CONTRACTS (FDD pages 117–118)
What This Means (2025 FDD)
According to Brightstar Care's 2025 Franchise Disclosure Document, as a Business Associate, Brightstar Care must promptly report to the Covered Entity any impermissible use or disclosure under Privacy Laws of which it becomes aware that compromises the security or privacy of Protected Health Information (PHI). This is considered a Breach.
The report of a Breach must include specific information if known or reasonably obtainable. This includes contact information for individuals who may be impacted by the Breach, the date of the Breach, and a brief description of the circumstances surrounding it.
Additionally, the report must contain a description of the type of information involved in the Breach and what Brightstar Care is doing to investigate the Breach and mitigate harm to individuals. This ensures that the Covered Entity has a comprehensive understanding of the Breach and can take appropriate action to protect the affected individuals and comply with privacy laws.