Common use of Adequate Safeguards for PHI Clause in Contracts

Adequate Safeguards for PHI. 2.3.1. Business Associate shall implement and maintain appropriate safeguards, which comply with the Privacy and Security Regulations, to prevent the Use or Disclosure of PHI in any manner other than as permitted by this Agreement. 2.3.2. Business Associate shall implement administrative, physical, and technical safeguards set forth in the Privacy and Security Regulations that reasonably and appropriately protect the confidentiality, integrity, and availability of Electronic PHI that it creates, receives, maintains, or transmits on behalf of Covered Entity. 2.3.3. Business Associate shall maintain policies and procedures, conduct ongoing risk assessment and risk management of its security program, identify a security official, and train and discipline its work force in compliance with the relevant portions of the Privacy and Security Regulations. Business Associate agrees to make its policies and procedures, risk assessments, and training and education documents available to Covered Entity upon Covered Entity’s request.