Obligations and Activities of Business Associates (1) Business Associate agrees not to use or disclose PHI other than as permitted or required by this Section of the Contract or as Required by Law.
(2) Business Associate agrees to use and maintain appropriate safeguards and comply with applicable HIPAA Standards with respect to all PHI and to prevent use or disclosure of PHI other than as provided for in this Section of the Contract and in accordance with HIPAA Standards.
(3) Business Associate agrees to use administrative, physical and technical safeguards that reasonably and appropriately protect the confidentiality, integrity, and availability of electronic Protected Health Information that it creates, receives, maintains, or transmits on behalf of the Covered Entity.
(4) Business Associate agrees to mitigate, to the extent practicable, any harmful effect that is known to the Business Associate of a use or disclosure of PHI by Business Associate in violation of this Section of the Contract.
(5) Business Associate agrees to report to Covered Entity any use or disclosure of PHI not provided for by this Section of the Contract or any Security Incident of which it becomes aware.
(6) Business Associate agrees, in accordance with 45 C.F.R. 502(e)(1)(ii) and 164.308(d)(2), if applicable, to ensure that any subcontractors that create, receive, maintain or transmit PHI on behalf of the Business Associate, agree to the same restrictions, conditions, and requirements that apply to the business associate with respect to such information.
(7) Business Associate agrees to provide access (including inspection, obtaining a copy or both), at the request of the Covered Entity, and in the time and manner designated by the Covered Entity, to PHI in a Designated Record Set, to Covered Entity or, as directed by Covered Entity, to an Individual in order to meet the requirements under 45 C.F.R. § 164.524. Business Associate shall not charge any fees greater than the lesser of the amount charged by the Covered Entity to an Individual for such records; the amount permitted by state law; or the Business Associate’s actual cost of postage, labor and supplies for complying with the request.
(8) Business Associate agrees to make any amendments to PHI in a Designated Record Set that the Covered Entity directs or agrees to pursuant to 45 C.F.R. § 164.526 at the request of the Covered Entity, and in the time and manner designated by the Covered Entity.
(9) Business Associate agrees to make internal practices, books, and records, including policies and procedures and PHI, relating to the use and disclosure of PHI received from, or created, maintained, transmitted or received by, Business Associate on behalf of Covered Entity, available to Covered Entity or to the Secretary in a time and manner agreed to by the parties or designated by the Secretary, for purposes of the Secretary investigating or determining Covered Entity’s compliance with the HIPAA Standards.
(10) Business Associate agrees to document such disclosures of PHI and information related to such disclosures as would be required for Covered Entity to respond to a request by an Individual for an accounting of disclosures of PHI in accordance with 45 C.F.R. § 164.528 and section 13405 of the HITECH Act (42 U.S.C. § 17935) and any regulations promulgated thereunder.
(11) Business Associate agrees to provide to Covered Entity, in a time and manner designated by the Covered Entity, information collected in accordance with subsection (g)(10) of this Section of the Contract, to permit Covered Entity to respond to a request by an Individual for an accounting of disclosures of PHI in accordance with 45 C.F.R. § 164.528 and section 13405 of the HITECH Act (42 U.S.C. § 17935) and any regulations promulgated thereunder. Business Associate agrees at the Covered Entity’s direction to provide an accounting of disclosures of PHI directly to an individual in accordance with 45 C.F.R. § 164.528 and section 13405 of the HITECH Act (42 U.S.C. § 17935) and any regulations promulgated thereunder.
(12) Business Associate agrees to comply with any State or federal law that is more stringent than the Privacy Rule.
(13) Business Associate agrees to comply with the requirements of the HITECH Act relating to privacy and security that are applicable to the Covered Entity and with the requirements of 45 C.F.R. §§ 164.504(e), 164.308, 164.310, 164.312, and 164.316.
(14) In the event that an Individual requests that the Business Associate
(A) restrict disclosures of PHI;
(B) provide an accounting of disclosures of the Individual’s PHI;
(C) provide a copy of the Individual’s PHI in an Electronic Health Record; or
(D) amend PHI in the Individual’s Designated Record Set the Business Associate agrees to notify the Covered Entity, in writing, within five Days of the request.
(15) Business Associate agrees that it shall not, and shall ensure that its subcontractors do not, directly or indirectly, receive any remuneration in exchange for PHI of an Individual without
(A) the written approval of the Covered Entity, unless receipt of remuneration in exchange for PHI is expressly authorized by this Contract and
(B) the valid authorization of the Individual, except for the purposes provided under section 13405(d)(2) of the HITECH Act, (42 U.S.C. § 17935(d)(2)) and in any accompanying regulations.
(16) Obligations in the Event of a Breach.
(A) The Business Associate agrees that, following the discovery by the Business Associate or by a subcontractor of the Business Associate of any use or disclosure not provided for by this section of the Contract, any breach of Unsecured protected health information, or any Security Incident, it shall notify the Covered Entity of such Breach in accordance with Subpart D of Part 164 of Title 45 of the Code of Federal Regulations and this Section of the Contract.
(B) Such notification shall be provided by the Business Associate to the Covered Entity without unreasonable delay, and in no case later than 30 days after the Breach is discovered by the Business Associate, or a subcontractor of the Business Associate, except as otherwise instructed in writing by a law enforcement official pursuant to 45 C.F.R. 164.412. A Breach is considered discovered as of the first day on which it is, or reasonably should have been, known to the Business Associate or its subcontractor. The notification shall include the identification and last known address, phone number and email address of each Individual (or the next of kin of the individual if the Individual is deceased) whose Unsecured protected health information has been, or is reasonably believed by the Business Associate to have been, accessed, acquired, or disclosed during such Breach.
(C) The Business Associate agrees to include in the notification to the Covered Entity at least the following information:
1. A description of what happened, including the date of the Breach; the date of the discovery of the Breach; the unauthorized person, if known, who used the PHI or to whom it was disclosed; and whether the PHI was actually acquired or viewed.
2. A description of the types of Unsecured protected health information that were involved in the Breach (such as full name, Social Security number, date of birth, home address, account number, or disability code).
3. The steps the Business Associate recommends that Individual(s) take to protect themselves from potential harm resulting from the Breach.
4. A detailed description of what the Business Associate is doing or has done to investigate the Breach, to mitigate losses, and to protect against any further Breaches.
5. Whether a law enforcement official has advised the Business Associate, either verbally or in writing, that he or she has determined that notification or notice to Individuals or the posting required under 45 C.F.R.
Obligations and Activities of Business Associate Business Associate agrees to:
a. Not use or disclose Protected Health Information other than as permitted or required by this BAA, the Agreement, or as required by law;
b. Use appropriate safeguards, and comply with Subpart C of 45 CFR Part 164 with respect to electronic Protected Health Information, to prevent Use or Disclosure of Protected Health Information other than as provided for by this BAA;
c. Report to Covered Entity any Use or Disclosure of Protected Health Information not provided for by this BAA of which it becomes aware, including breaches of Unsecured Protected Health Information as required at 45 CFR 164.410, and any Security Incident of which it becomes aware;
d. In accordance with 45 CFR 164.502(e)(1)(ii) and 164.308(b)(2), if applicable, ensure that any Subcontractors that create, receive, maintain, or transmit Protected Health Information on behalf of the Business Associate agree to the same restrictions, conditions, and requirements that apply to Business Associate with respect to such information;
e. Make available Protected Health Information in a Designated Record Set to Covered Entity or to an individual whose Protected Health Information is maintained by Business Associate, or the individual’s designee, and document and retain the documentation required by 45 CFR 164.530(j), as necessary to satisfy Covered Entity’s obligations under 45 CFR 164.524;
f. Make any amendment(s) to Protected Health Information in a Designated Record Set as directed or agreed to by the Covered Entity pursuant to 45 CFR 164.526, or take other measures as necessary to satisfy Covered Entity’s obligations under 45 CFR 164.526;
g. Maintain and make available the information required to provide an accounting of Disclosures to the Covered Entity as necessary to satisfy Covered Entity’s obligations under 45 CFR 164.528;
h. To the extent the Business Associate is to carry out one or more of Covered Entity's obligation(s) under Subpart E of 45 CFR Part 164, comply with the requirements of Subpart E that apply to the Covered Entity in the performance of such obligation(s); and
i. Make its internal practices, books, and records available to the Secretary for purposes of determining Business Associate’s or Covered Entity’s compliance with HIPAA and HIPAA Regulations.
Security Violations and Accounts Updates Grantee will adhere to the Confidentiality Article requirements and HHS Data Usage Agreement of this contract and immediately contact System Agency if a security violation is detected, or if Grantee has any reason to suspect that the security or integrity of the CMBHS data has been or may be compromised in any way.
OBLIGATIONS AND ACTIVITIES OF CONTRACTOR AS BUSINESS ASSOCIATE 1. CONTRACTOR agrees not to use or further disclose PHI COUNTY discloses to CONTRACTOR other than as permitted or required by this Business Associate Contract or as required by law.
2. XXXXXXXXXX agrees to use appropriate safeguards, as provided for in this Business Associate Contract and the Agreement, to prevent use or disclosure of PHI COUNTY discloses to CONTRACTOR or CONTRACTOR creates, receives, maintains, or transmits on behalf of COUNTY other than as provided for by this Business Associate Contract.
3. XXXXXXXXXX agrees to comply with the HIPAA Security Rule at Subpart C of 45 CFR Part 164 with respect to electronic PHI COUNTY discloses to CONTRACTOR or CONTRACTOR creates, receives, maintains, or transmits on behalf of COUNTY.
4. CONTRACTOR agrees to mitigate, to the extent practicable, any harmful effect that is known to CONTRACTOR of a Use or Disclosure of PHI by CONTRACTOR in violation of the requirements of this Business Associate Contract.
5. XXXXXXXXXX agrees to report to COUNTY immediately any Use or Disclosure of PHI not provided for by this Business Associate Contract of which CONTRACTOR becomes aware. CONTRACTOR must report Breaches of Unsecured PHI in accordance with Paragraph E below and as required by 45 CFR § 164.410.
6. CONTRACTOR agrees to ensure that any Subcontractors that create, receive, maintain, or transmit PHI on behalf of CONTRACTOR agree to the same restrictions and conditions that apply through this Business Associate Contract to CONTRACTOR with respect to such information.
7. CONTRACTOR agrees to provide access, within fifteen (15) calendar days of receipt of a written request by COUNTY, to PHI in a Designated Record Set, to COUNTY or, as directed by COUNTY, to an Individual in order to meet the requirements under 45 CFR § 164.524. If CONTRACTOR maintains an Electronic Health Record with PHI, and an individual requests a copy of such information in an electronic format, CONTRACTOR shall provide such information in an electronic format.
8. CONTRACTOR agrees to make any amendment(s) to PHI in a Designated Record Set that COUNTY directs or agrees to pursuant to 45 CFR § 164.526 at the request of COUNTY or an Individual, within thirty (30) calendar days of receipt of said request by COUNTY. XXXXXXXXXX agrees to notify COUNTY in writing no later than ten (10) calendar days after said amendment is completed.
9. CONTRACTOR agrees to make internal practices, books, and records, including policies and procedures, relating to the use and disclosure of PHI received from, or created or received by CONTRACTOR on behalf of, COUNTY available to COUNTY and the Secretary in a time and manner as determined by COUNTY or as designated by the Secretary for purposes of the Secretary determining COUNTY’S compliance with the HIPAA Privacy Rule.
10. CONTRACTOR agrees to document any Disclosures of PHI COUNTY discloses to CONTRACTOR or CONTRACTOR creates, receives, maintains, or transmits on behalf of COUNTY, and to make information related to such Disclosures available as would be required for COUNTY to respond to a request by an Individual for an accounting of Disclosures of PHI in accordance with 45 CFR § 164.528.
11. CONTRACTOR agrees to provide COUNTY or an Individual, as directed by COUNTY, in a time and manner to be determined by COUNTY, that information collected in accordance with the Agreement, in order to permit COUNTY to respond to a request by an Individual for an accounting of Disclosures of PHI in accordance with 45 CFR § 164.528.
12. XXXXXXXXXX agrees that to the extent CONTRACTOR carries out COUNTY’s obligation under the HIPAA Privacy and/or Security rules CONTRACTOR will comply with the requirements of 45 CFR Part 164 that apply to COUNTY in the performance of such obligation.
13. If CONTRACTOR receives Social Security data from COUNTY provided to COUNTY by a state agency, upon request by COUNTY, CONTRACTOR shall provide COUNTY with a list of all employees, subcontractors and agents who have access to the Social Security data, including employees, agents, subcontractors and agents of its subcontractors.
14. CONTRACTOR will notify COUNTY if CONTRACTOR is named as a defendant in a criminal proceeding for a violation of HIPAA. COUNTY may terminate the Agreement, if CONTRACTOR is found guilty of a criminal violation in connection with HIPAA. COUNTY may terminate the Agreement, if a finding or stipulation that CONTRACTOR has violated any standard or requirement of the privacy or security provisions of HIPAA, or other security or privacy laws are made in any administrative or civil proceeding in which CONTRACTOR is a party or has been joined. COUNTY will consider the nature and seriousness of the violation in deciding whether or not to terminate the Agreement.
Absence of Certain Changes, Events and Conditions Since the Interim Balance Sheet Date, and other than in the ordinary course of business consistent with past practice as contemplated herein, there has not been, with respect to the Companies, any:
(a) event, occurrence or development that has had, or could reasonably be expected to have, individually or in the aggregate, a Business Material Adverse Effect;
(b) amendment of such entities’ chartering documents;
(c) split, combination or reclassification of any shares of its limited liability company/membership interests, capital stock or other equity interests;
(d) except any transaction that may occur pursuant to the WSDA Agreement, issuance, sale or other disposition of any of its limited liability company/membership interests, capital stock or other equity interests, or grant of any options, warrants or other rights to purchase or obtain (including upon conversion, exchange or exercise) any of its limited liability company/membership interests, capital stock or other equity interests;
(e) declaration or payment of any dividends or distributions on or in respect of any of its limited liability company/membership interests, capital stock or other equity interests, or redemption, purchase or acquisition of its limited liability company/membership interests, capital stock or other equity interests;
(f) material change in any method of accounting or accounting practice, except as required by GAAP or SAP or as disclosed in the notes to the Financial Statements;
(g) material change in its cash management practices and its policies, practices and procedures with respect to collection of accounts receivable, establishment of reserves for uncollectible accounts, accrual of accounts receivable, inventory control, prepayment of expenses, payment of trade accounts payable, accrual of other expenses, deferral of revenue and acceptance of customer deposits;
(h) entry into any contract that would constitute a Material Contract;
(i) incurrence, assumption or guarantee of any Indebtedness for borrowed money except unsecured current obligations and Liabilities incurred in the ordinary course of business consistent with past practice;
(j) transfer, assignment, sale or other disposition of any material assets shown or reflected in the Interim Balance Sheet or cancellation of any debts or entitlements;
(k) transfer, assignment or grant of any license or sublicense of any material rights under or with respect to any Company Intellectual Property or Company IP Agreements;
(l) material damage, destruction or loss (whether or not covered by insurance) to an asset material to it;
(m) capital investment in, or any loan to, any other Person;
(n) acceleration, termination, material modification to or cancellation of any Material Contract to which it is a party or by which it is bound;
(o) material capital expenditures;
(p) imposition of any Encumbrance upon its properties, capital stock or assets, tangible or intangible;
(i) grant of any bonuses, whether monetary or otherwise, or increase in any wages, salary, severance, pension or other compensation or benefits in respect of the Companies current or former employees, directors, officers, managers, independent contractors or consultants, other than
(A) in the ordinary course of business consistent with past practices, (B) as provided for in any written agreements or (C) as required by applicable Law, (ii) change in the terms of employment for any employee or any termination of any employees for which the aggregate costs and expenses exceed $10,000, or (iii) action to accelerate the vesting or payment of any compensation or benefit for any current or former employee, officer, director, manager, independent contractor or consultant;
(r) hiring or promoting any person as or to (as the case may be) an officer or hiring or promoting any employee below officer except to fill a vacancy in the ordinary course of business;
(s) adoption, modification or termination of any: (i) employment, severance, retention or other agreement with any current or former employee, officer, director, manager, independent contractor or consultant, (ii) Plan or (iii) collective bargaining or other agreement with a union, in each case whether written or oral;
(t) loan to (or forgiveness of any loan to), or entry into any other transaction with, any of its shareholders or members, or current or former directors, managers, officers and employees;
(u) entry into a new line of business or abandonment or discontinuance of existing lines of business;
(v) except for this Agreement, adoption of any plan of merger, consolidation, reorganization, liquidation or dissolution or filing of a petition in bankruptcy under any provisions of federal or state bankruptcy Law or consent to the filing of any bankruptcy petition against it under any similar Law;
(w) purchase, lease or other acquisition of the right to own, use or lease any property or assets for an amount in excess of $100,000 individually (in the case of a lease, per annum) or $100,000 in the aggregate (in the case of a lease, for the entire term of the lease, not including any option term), except for purchases of inventory or supplies in the ordinary course of business consistent with past practice;
(x) acquisition by merger or consolidation with, or by purchase of a substantial portion of the assets or stock or limited liability company/membership interests of, or by any other manner, any business or any Person or any division thereof;
(y) action by it to make, change or revoke any material election in respect of Taxes (except as required by Law), change an annual accounting period, adopt or change any accounting method with respect to Taxes except as may be required as a result of a change in Law, make any material agreement or settlement with respect to Taxes, file any amended Tax return, surrender any right to claim a refund of Taxes, or consent to any extension or waiver of the limitation period applicable to any Tax claim or assessment;
(z) entry, issuance, or filing, with or without the request or consent or over the objection of it, or any order, consent order, of directive relating to any Company of or by any Applicable Regulator, or undertaking or agreement by such Company to or with any Applicable Regulator; or
(aa) Contract to do any of the foregoing, or any action or omission that would result in any of the foregoing.
Authorization of Agreements; Absence of Defaults and Conflicts The Investment Adviser has full power and authority to enter into this Agreement and the Investment Management Agreement. This Agreement and the Investment Management Agreement have each been duly authorized, executed and delivered by the Investment Adviser, and, assuming due authorization, execution and delivery by the other parties thereto, such Agreements constitute valid and binding obligations of the Investment Adviser, enforceable in accordance with their respective terms, except as affected by bankruptcy, insolvency, fraudulent conveyance, reorganization, moratorium and other similar laws, whether statutory or decisional, relating to or affecting creditors’ rights generally and general equitable principles (whether considered in a proceeding in equity or at law); and neither the execution and delivery of this Agreement or the Investment Management Agreement nor the performance by the Investment Adviser of its obligations hereunder or thereunder nor the consummation of the transactions herein or therein contemplated will conflict with, or result in a breach of any of the terms and provisions of, or constitute, with or without the giving of notice or lapse of time or both, a default under, any agreement or instrument to which the Investment Adviser is a party or by which it is bound, the organizational documents of the Investment Adviser, or any law, order, decree, rule or regulation applicable to it of any jurisdiction, court, federal or state regulatory body, administrative agency or other governmental body, stock exchange or securities association having jurisdiction over the Investment Adviser or its properties or operations; and no consent, approval, authorization or order of any court or governmental authority, regulatory body or agency is required for the consummation by the Investment Adviser of the transactions contemplated by this Agreement or the Investment Management Agreement except as have been obtained or may be required under the 1933 Act, the 1940 Act, the 1934 Act, the NYSE or state securities laws.
Permitted Activities of Holdings Holdings shall not:
(a) incur any third party Indebtedness for borrowed money other than Guarantees of Indebtedness or other obligations of the Borrower and/or any Restricted Subsidiary, which Indebtedness or other obligations are otherwise permitted or not prohibited hereunder;
(b) create or suffer to exist any Lien on any asset now owned or hereafter acquired by it other than (i) the Liens created under the Collateral Documents and, subject to the Closing Date Intercreditor Agreement, the collateral documents relating to any Second Lien Term Loans, in each case, to which it is a party, (ii) any other Lien created in connection with the Transactions, (iii) Liens on the Collateral that are secured on a pari passu or junior basis with the Secured Obligations, so long as such Liens secure Guarantees permitted under clause (a)(ii) above and the underlying Indebtedness subject to such Guarantee is permitted to be secured on the same basis pursuant to Section 6.02 and (iv) Liens of the type permitted under Section 6.02 (other than in respect of debt for borrowed money); or
(c) consolidate or amalgamate with, or merge with or into, or convey, sell or otherwise transfer all or substantially all of its assets to, any Person; provided that, so long as no Default or Event of Default exists or would result therefrom and subject to Sections 6.11(a) and (b), (A) Holdings may consolidate or amalgamate with, or merge with or into, any other Person (other than the Borrower and any of its subsidiaries) so long as (i) Holdings is the continuing or surviving Person or (ii) if the Person formed by or surviving any such consolidation, amalgamation or merger is not Holdings (w) the successor Person (such successor Person, “Successor Holdings”) expressly assumes all obligations of Holdings under this Agreement and the other Loan Documents to which Holdings is a party pursuant to a supplement hereto and/or thereto in a form reasonably satisfactory to the Administrative Agent, (x) Successor Holdings shall be an entity organized or existing under the laws of the US, any state thereof or the District of Columbia, (y) the Administrative Agent shall have a security interest in the Collateral for the benefit of the Secured Parties pursuant to the Collateral Documents that is perfected to at least the same extent as in effect immediately prior to such merger, consolidation or amalgamation and all actions reasonably requested by the Administrative Agent to maintain such perfected status have been or will promptly be taken (subject to the terms of the applicable Loan Documents), and (z) the Borrower delivers a certificate of a Responsible Officer with respect to the satisfaction of the conditions set forth in clause (w) of this clause (A)(ii) and (B) Holdings may otherwise convey, sell or otherwise transfer all or substantially all of its assets to any other Person organized or existing under the laws of the US, any state thereof or the District of Columbia (other than the Borrower and any of its subsidiaries) so long as (x) no Change of Control results therefrom, (y) the Person acquiring such assets expressly assumes all of the obligations of Holdings under this Agreement and the other Loan Documents to which Holdings is a party pursuant to a supplement hereto and/or thereto in a form reasonably satisfactory to the Administrative Agent and (z) the Borrower delivers a certificate of a Responsible Officer with respect to the satisfaction of the conditions under clause (y) set forth in this clause (B); provided, further, that (1) if the conditions set forth in the preceding proviso are satisfied, Successor Holdings will succeed to, and be substituted for, Holdings under this Agreement and (2) it is understood and agreed that Holdings may convert into another form of entity organized or existing under the laws of the US, any state thereof or the District of Columbia so long as such conversion does not adversely affect the value of the Guarantees under the Loan Guaranty or the Collateral.
Additional Covenants Agreements and Acknowledgements a. [Intentionally Omitted].
Certification Regarding Business with Certain Countries and Organizations Pursuant to Subchapter F, Chapter 2252, Texas Government Code, PROVIDER certifies it is not engaged in business with Iran, Sudan, or a foreign terrorist organization. PROVIDER acknowledges this Purchase Order may be terminated if this certification is or becomes inaccurate.
Definitions and Accounting Matters Section 1.01 Terms Defined Above 1 Section 1.02 Certain Defined Terms 1 Section 1.03 Types of Loans and Borrowings 20 Section 1.04 Terms Generally; Rules of Construction 20 Section 1.05 Accounting Terms and Determinations; GAAP 21
