Permitted Uses and Disclosures of PHI and the third party notifies the Business Associate of any instances of which it is aware in which the confidentiality of the information has been breached.
Records Audit and Disclosure 5.01 Access to records, books, and documents
5.02 Response/compliance with audit or inspection findings
A. At Performing Agency's sole expense, Performing Agency must take action to ensure its or a Subcontractor’s compliance with a correction of any finding of noncompliance with any law, regulation, audit requirement, or generally accepted accounting principle relating to the Services and Deliverables or any other deficiency contained in any audit, review, or inspection conducted under the Contract. Whether Performing Agency's action corrects the noncompliance shall be solely the decision of the System Agency.
B. As part of the Services, Performing Agency must provide to HHSC upon request a copy of those portions of Performing Agency's and its Subcontractors' internal audit reports relating to the Services and Deliverables provided to the State under the Contract.
Accounting and Disclosure Controls The Company and its subsidiaries have taken all actions necessary to ensure that, within the time period required by applicable law, the Company will have established and will maintain effective “internal control over financial reporting” (as defined in Rule 13a-15 of the 1934 Act Regulations). The Company and its subsidiaries maintain a system of internal accounting controls sufficient to provide reasonable assurance that (A) transactions are executed in accordance with management’s general or specific authorizations; (B) transactions are recorded as necessary to permit preparation of financial statements in conformity with GAAP and to maintain asset accountability; (C) access to assets is permitted only in accordance with management’s general or specific authorization; and (D) the recorded accountability for assets is compared with the existing assets at reasonable intervals and appropriate action is taken with respect to any differences. Except as described in the Registration Statement, the General Disclosure Package and the Prospectus, since the first day of the Company’s earliest fiscal year for which audited financial statements are included or incorporated by reference in the Registration Statement, the General Disclosure Package and the Prospectus, there has been (1) no material weakness (as defined in Rule 1-02 of Regulation S-X of the Commission) in the Company’s internal control over financial reporting (whether or not remediated), and (2) no fraud, whether or not material, involving management or other employees who have a role in the Company’s internal control over financial reporting and, since the end of the Company’s earliest fiscal year for which audited financial statements are included or incorporated by reference in the Registration Statement, the General Disclosure Package and the Prospectus, there has been no change in the Company’s internal control over financial reporting that has materially affected, or is reasonably likely to materially affect, the Company’s internal control over financial reporting. The Company and its subsidiaries have established, maintained and periodically evaluate the effectiveness of “disclosure controls and procedures” (as defined in Rules 13a-15 of the 1934 Act Regulation and 15d-15 under the 1934 Act); such disclosure controls and procedures are designed to ensure that information required to be disclosed by the Company in the reports that it will be required to file or submit under the 1934 Act is recorded, processed, summarized and reported, within the time periods specified in the Commission’s rules and forms, and is accumulated and communicated to the Company’s management, including its principal executive officer or officers and principal financial officer or officers, as appropriate, to allow timely decisions regarding disclosure. The Company’s independent public accountants and the audit committee of the Company’s board of directors have been advised of all material weaknesses, if any, and significant deficiencies (as defined in Rule 1-02 of Regulation S-X of the Commission), if any, in the Company’s internal control over financial reporting and of all fraud, if any, whether or not material, involving management or other employees who have a role in the Company’s internal control over financial reporting, in each case that occurred or existed, or was first detected at any time during the three most recent fiscal years covered by the Company’s audited financial statements included in the Registration Statement, the General Disclosure Package and the Prospectus or at any time subsequent thereto.
Permitted Uses and Disclosures of Phi by Business Associate Except as otherwise indicated in this Agreement, Business Associate may use or disclose PHI, inclusive of de-identified data derived from such PHI, only to perform functions, activities or services specified in this Agreement on behalf of DHCS, provided that such use or disclosure would not violate HIPAA or other applicable laws if done by DHCS.
CERTIFICATION AND DISCLOSURE REGARDING PAYMENTS TO INFLUENCE CERTAIN FEDERAL TRANSACTIONS (SEP 2007). This clause applies only if this contract exceeds (i) $100,000 if included in
PERMITTED USES AND DISCLOSURES BY CONTRACTOR Except as otherwise limited in this Schedule, Contractor may use or disclose Protected Health Information to perform functions, activities, or services for, or on behalf of, County as specified in the Agreement; provided that such use or disclosure would not violate the Privacy Rule if done by County.
Permitted Uses and Disclosures by Business Associate Except as otherwise limited by this Agreement, Business Associate may make any uses and disclosures of Protected Health Information necessary to perform its services to Covered Entity and otherwise meet its obligations under this Agreement, if such use or disclosure would not violate the Privacy Rule if done by Covered Entity. All other uses or disclosures by Business Associate not authorized by this Agreement or by specific instruction of Covered Entity are prohibited.
Permitted Uses and Disclosure by Business Associate (1) General Use and Disclosure Provisions Except as otherwise limited in this Section of the Contract, Business Associate may use or disclose PHI to perform functions, activities, or services for, or on behalf of, Covered Entity as specified in this Contract, provided that such use or disclosure would not violate the HIPAA Standards if done by Covered Entity or the minimum necessary policies and procedures of the Covered Entity.
Public Statements and Disclosure The initial press release concerning this Agreement and the Merger will be a joint press release reasonably acceptable to the Company and Parent and will be issued promptly following the execution and delivery of this Agreement. Thereafter, unless the Company Special Committee has made a Company Recommendation Change, the Company and its Representatives, on the one hand, and Parent and Merger Sub and their respective Representatives, on the other hand, will consult with the other Parties before (a) participating in any media interviews; (b) engaging in any meetings or calls with analysts, institutional investors or other similar Persons; or (c) providing any statements that are public or are reasonably likely to become public, in each case to the extent relating to this Agreement or the Merger and neither party shall issue any press release or make any public announcement or statement without the consent of the other party, which shall not be unreasonably withheld, conditioned or delayed; provided, that to the extent such release or announcement is required by applicable Law or any listing agreement with or rule of any national securities exchange or association upon which the securities of the Company are listed, the party required to make the release, announcement or statement shall use reasonable best efforts to consult with the other Party about, and allow the other Party reasonable time (taking into account the circumstances) to comment on, such release, announcement or statement in advance of such issuance. Notwithstanding the foregoing, neither Parent nor the Company will be obligated to engage in such consultation with respect to communications that are (i) principally directed to its employees, drivers, suppliers, customers, partners or vendors so long as such communications are consistent with prior communications previously agreed to by Parent and the Company and do not add additional material information not included in such previous communication (in which case such communications may be made consistent with such plan); (ii) related to a Superior Proposal or Company Recommendation Change or, in each case, any action taken pursuant thereto; (iii) with respect to any dispute or Legal Proceeding solely among the Parties or their respective Affiliates related to this Agreement or the Transaction Documents; or (iv) substantively consistent with previous public disclosures made by the Parties in compliance with this Section 6.13 and which do not add additional material information not included in such previous disclosure. Parent will not be obligated to engage in such consultation with respect to communications that are principally directed to its existing or prospective equity holders and investors of Parent or its Affiliates, so long as such communications are consistent with prior communications previously agreed to by Parent and the Company and do not add additional material information not included in such previous communication.
Identification and Disclosure of Privacy and Security Offices Business Associate and Subcontractors shall provide, within ten (10) days of the execution of this agreement, written notice to the Covered Entity’s contract/grant manager the names and contact information of both the HIPAA Privacy Officer and HIPAA Security Officer. This information must be updated any time either of these contacts changes.
